Ocas Praxis
v2.0.0Bounded behavioral refinement loop. Records outcomes, extracts micro-lessons from repeated patterns, consolidates them into capped active behavior shifts, ap...
⭐ 0· 163·0 current·0 all-time
byIndigo Karasu@indigokarasu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's stated purpose (recording events, extracting lessons, proposing/activating behavior shifts, and producing debriefs) matches the commands, data model, and storage layout in the documentation. It legitimately needs read/write access to a dedicated data directory. However, the SKILL.md references OCAS_ROOT and specific data/journal paths while the skill metadata declares no required config paths or env vars — a minor mismatch in the manifest vs runtime docs.
Instruction Scope
Runtime instructions are narrowly scoped: they read intake JSON files from a dedicated intake directory, record events/lessons/shifts into local JSONL files, move processed files to intake/processed, and write per-run journals. There are no network endpoints or instructions to read unrelated system files. This behavior fits the stated purpose.
Install Mechanism
This is an instruction-only skill with no install spec and no code files — lowest-risk install footprint. Nothing is downloaded or written by an installer.
Credentials
The skill declares no required environment variables, but the docs say OCAS_ROOT can override ~/openclaw. The runtime uses filesystem paths under the user's home; that is reasonable for the functionality, but the manifest should explicitly declare OCAS_ROOT (or the required config path) so users know filesystem access will be needed. Also consider that journals and events may contain sensitive context or hashes.
Persistence & Privilege
The skill stores data under its own ~/openclaw/data/ocas-praxis and ~/openclaw/journals/ocas-praxis locations and enforces caps and retention configuration. It does not request always:true, and it does not purport to modify other skills or system-wide configuration. Persistence is scoped to its own directories.
Assessment
This skill appears to do what it says: manage a bounded loop of events→lessons→shifts and write auditable journals. Before installing, confirm you are comfortable granting the agent read/write access to ~/openclaw/data/ocas-praxis and ~/openclaw/journals (or set OCAS_ROOT to an isolated directory). Ask the author to update the manifest to declare OCAS_ROOT or required config paths so the required filesystem access is explicit. Review the retention settings (config.json) to avoid persisting sensitive inputs, and ensure any automated handoff (Corvus → intake) comes from trusted sources. If you need stronger assurance, run the skill in an isolated environment or inspect runtime-produced files periodically.Like a lobster shell, security has layers — review code before you run it.
latestvk97fvy4smgn86frjj9q72bm111835gp9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔄 Clawdis