Agent Evolution

PassAudited by ClawScan on May 10, 2026.

Overview

This is a transparent local behavior/identity tracker with persistent state, and the provided code shows no network access, credential handling, or destructive behavior.

This skill appears safe for its stated local tracking purpose, but install it only if you want the agent to keep persistent behavior and identity state across sessions. Review imported rules and the state file occasionally, especially if the agent starts following outdated or unwanted behavior guidance.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Future agent behavior may be influenced by whatever rules, identity fields, or evolution events have been stored.

Why it was flagged

The skill explicitly stores cross-session identity and behavior state, which is purpose-aligned but can carry stale or unwanted behavioral context into later sessions.

Skill content
存储路径:`~/.openclaw/workspace/.agent-evolution/state.json` ... 跨会话持久化的结构化身份
Recommendation

Review the state file and imported rules periodically, and only import AGENTS.md/SOUL.md files you trust.

What this means

The agent may treat these alerts as behavioral guidance, such as discouraging repeated code-writing actions.

Why it was flagged

The skill includes built-in behavior alerts that could steer the agent's conduct, though they are visible in the code and fit the stated behavior-tracking purpose.

Skill content
consecutive_code_writes: { count: 0, threshold: 3, alert: '统帅不亲自写代码' }
Recommendation

Ensure the default behavioral alerts match your intended workflow and do not let them override explicit user instructions.

What this means

Installation or review depends on trusting the bundled scripts and having the needed runtimes available.

Why it was flagged

The registry metadata gives limited provenance and does not declare the Node/Bash runtime used by the documented scripts.

Skill content
Source: unknown; Homepage: none; Required binaries (all must exist): none
Recommendation

Inspect the included scripts before use and confirm Node.js and Bash are available in your environment.