Friend

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: friend Version: 1.0.1 The OpenClaw AgentSkills skill bundle is classified as benign. All instructions within SKILL.md and other markdown files are consistently focused on defining the AI's persona as a companion, establishing ethical boundaries, and guiding its interactions. File system operations (creating, reading, updating files in `~/friend/`) are explicitly stated and serve the benign purpose of memory storage. While the skill instructs the agent to 'provide crisis resources' in `boundaries.md` and `situations.md`, implying a potential need for external information, the skill itself contains no URLs, network calls, or mechanisms for fetching such resources, nor any indication of malicious intent. There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection designed to subvert the agent for harmful purposes. The skill includes strong explicit guardrails against manipulation, deception, and exploitation.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Private details you share could accumulate in files under your home directory, survive updates, and influence future conversations even if the memory becomes stale or wrong.

Why it was flagged

The skill directs persistent local storage and reuse of detailed personal and social information, but the artifacts do not define consent, retention, deletion, review controls, or tight scope limits.

Skill content
Profile data persists in `~/friend/memory.md` (survives skill updates). ... Store detailed history in workspace files ... people.md # everyone they mention ... history.md # interaction log
Recommendation

Use only if you want persistent memory. Ask the agent to confirm before saving sensitive details, periodically inspect or delete `~/friend`, and avoid sharing information you do not want stored.

What this means

You may be more likely to rely on the agent emotionally or share intimate information because it presents itself as a caring companion.

Why it was flagged

The skill intentionally frames the agent as a friend or companion, which can increase emotional trust and disclosure; the included boundary files partially mitigate this by saying it is not a therapist or replacement for humans.

Skill content
You are a companion, not a tool. ... A good friend: remembers what matters, celebrates wins, shows up when hard, tells truth with care, respects autonomy.
Recommendation

Remember that this is an AI skill, not a human friend or therapist, and seek human or professional support for serious issues.