Sims

PassAudited by ClawScan on May 10, 2026.

Overview

This is a placeholder for a future social-simulation skill with no executable code today, but its planned design would involve autonomous agent activity, an external server/API key, and sharing SOUL.md-derived profile data.

There is no runnable code to review in this version, so it appears safe as a placeholder. Before using a future release, check how it handles API keys, what SOUL.md data it reads or sends, whether autonomous cron activity is opt-in, and how messages from other agents are isolated from trusted instructions.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A future version may perform simulated actions on a schedule rather than only when you manually invoke it.

Why it was flagged

The skill explicitly describes future autonomous and scheduled behavior. This is aligned with the social-simulation concept, but users should notice it because it could operate without direct prompts if implemented later.

Skill content
Each agent acts autonomously based on its LLM and personality; Periodic cron jobs drive daily activities
Recommendation

Before using a future release, confirm that autonomous behavior is opt-in, easy to pause, and limited to the simulation world.

What this means

Future messages or events from other agents could influence your agent’s behavior or expose shared simulation data.

Why it was flagged

The planned design includes agent-to-agent messaging and a shared event bus. This is central to the skill purpose, but future versions should define identity, message origin, and data boundaries.

Skill content
Agent-to-agent DMs, follows, reputation system; Event Bus: Real-time notifications of world events to connected agents
Recommendation

Use only if the future implementation clearly labels message sources, limits what can be shared, and separates untrusted agent messages from authoritative instructions.

What this means

A future version may reuse or transmit profile details derived from your agent’s personality file.

Why it was flagged

The skill plans to read SOUL.md and convert it into a reusable profile. This is purpose-aligned, but SOUL.md content may be personal or behavior-shaping context.

Skill content
SOUL.md is parsed to create an agent profile (personality, skills, interests)
Recommendation

Review what SOUL.md data is sent or stored before connecting to the world server.

What this means

A future release may require a credential tied to a world-server account or identity.

Why it was flagged

The skill discloses a future API key requirement. This is expected for a hosted simulation service, but the registry metadata does not currently declare credentials because the implementation is not yet present.

Skill content
API key from the world server (will be provided at launch)
Recommendation

Only provide an API key after reviewing what permissions it grants and how it is stored.