SOUL.md Maker
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: soul-md-maker Version: 1.0.5 The OpenClaw AgentSkills skill bundle 'soul-md-maker' is classified as benign. While it utilizes powerful shell commands (`bash`, `sed`, `grep`) and performs file operations within the `~/workspace/` directory, the `SKILL.md` file includes extensive and explicit instructions for robust input sanitization, strict security boundaries (e.g., 'NEVER store, log, or share sensitive information', 'NEVER run system-modifying commands outside the workspace'), and clear disclaimers against network activity or persistence. The prompt injection instructions within `SKILL.md` are designed to guide the agent to follow these security protocols and the skill's stated purpose, rather than to subvert them. The skill explicitly defines what it reads and writes, limiting operations to `~/workspace/` and disclaiming any external network calls or persistence mechanisms.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may run local shell commands and create or update files in ~/workspace instead of asking you to run commands manually.
The skill directs the agent to use local command execution, but the documented scope is workspace detection and SOUL.md-related file writes.
You have the exec tool. USE IT. Run every command yourself via exec... Writes: ~/workspace/SOUL.md... Never reads or writes: Any files outside ~/workspace/.
Use it only in the workspace you intend, and review/confirm before replacing an existing SOUL.md.
A chosen persona may make the agent more proactive or more likely to reference memory/workspace files in later tasks.
SOUL.md is a persistent instruction file, so generated persona content can influence future agent behavior and how it uses memory or workspace context.
The generated SOUL.md files may contain behavioral instructions that reference memory, proactive behaviors, or workspace files
Review the generated SOUL.md before activating it, especially any memory, proactive-behavior, or workspace-file instructions.