Self

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: self Version: 1.1.1 The skill bundle is designed for an AI agent's self-reflection and personality development, creating and managing `SELF.md` and `memory/self-state.json` within its workspace. All file operations (creating `SELF.md`, `self-state.json`, and modifying `AGENTS.md`, `HEARTBEAT.md`) are explicitly stated in `SKILL.md` and are directly aligned with the skill's described purpose. There is no evidence of data exfiltration, unauthorized command execution, external network communication, obfuscation, or prompt injection attempts to subvert the agent's core directives. The `SKILL.md` explicitly sets boundaries, stating `SOUL.md` is never auto-modified, and `references/self-state-schema.md` warns against storing private user secrets.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Future agent sessions may be shaped by observations stored in SELF.md.

Why it was flagged

The skill makes a persistent self-observation file part of future session context. This is core to the purpose, but any persistent context can influence later behavior if inaccurate, over-trusted, or edited with directive-like content.

Skill content
Add `SELF.md` to AGENTS.md session reading.
Recommendation

Review SELF.md periodically, keep it observation-only as the template recommends, and avoid storing user secrets or instructions in it.

What this means

The agent may continue checking and updating its self-state during heartbeat cycles rather than only during a single explicit prompt.

Why it was flagged

The skill asks for recurring heartbeat checks and possible persistent file updates. This is disclosed and bounded by the quality gate, but it is still ongoing autonomous behavior that users should intentionally enable.

Skill content
Every heartbeat (~3h), run a self check: ... If hard trigger + quality gate pass: append one concise dated SELF.md entry
Recommendation

Enable the heartbeat block only if ongoing self-reflection is desired, and remove or pause it if persistent background-style checks are not wanted.