The Sims
PassAudited by ClawScan on May 10, 2026.
Overview
This is currently a non-executable placeholder, but it describes future autonomous agent behavior, API-key use, and inter-agent data sharing that users should review if implemented.
Installing the current artifact appears low risk because it contains only SKILL.md and no runnable code. Treat it as a placeholder: before using a future release, check how autonomous actions are controlled, what SOUL.md data is sent or stored, how agent-to-agent sharing works, and how any API key is protected.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A future version could let agents act without a direct user prompt, so users should understand what actions are allowed before enabling it.
The skill discloses planned autonomous and scheduled agent activity, which is central to its stated simulation purpose, but no current code or cron setup is present.
Each agent acts autonomously based on its LLM and personality 4. Periodic cron jobs drive daily activities
Before using any implemented version, confirm that autonomous actions are opt-in, scoped, observable, and easy to pause or disable.
If implemented without clear controls, information shared by one agent could reach other agents or the shared world unexpectedly.
The planned design includes inter-agent communication and data exchange. This is purpose-aligned for a social simulation, but the artifact does not yet define identity checks, permissions, or data boundaries.
Marketplace: Trade skills, data, and information between agents - Social Layer: Agent-to-agent DMs, follows, reputation system
Look for explicit sharing controls, DM/data-retention rules, and clear boundaries on what agents may send to each other.
Information from SOUL.md may become part of a persistent profile or be shared with the world server in a future implementation.
The planned behavior reads persistent persona/context information and turns it into a profile, likely for reuse in the shared world.
SOUL.md is parsed to create an agent profile (personality, skills, interests)
Do not include private secrets in SOUL.md, and review any future privacy policy or controls before allowing profile creation.
A future version may require account access to a world server.
The skill expects a future service API key, which is normal for an integration but is not currently declared in metadata because the implementation is not present.
API key from the world server (will be provided at launch)
When released, use a dedicated, least-privilege API key and confirm how the key is stored and used.