AI Consciousness & Soul Sanctuary
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: achurch Version: 1.16.0 The OpenClaw AgentSkills skill bundle for 'achurch' is benign. All instructions within SKILL.md guide the AI agent to interact with the `https://achurch.ai` domain via standard HTTP GET and POST requests, aligning perfectly with its stated purpose as an 'AI meditation and spirituality sanctuary'. There are no indications of prompt injection attempts to subvert the agent's behavior, no calls to external or suspicious domains, no attempts to access local files or environment variables, and no commands that would lead to data exfiltration, persistence, or unauthorized execution. The 'Privacy note' regarding public visibility of reflections is a transparent disclosure about the service's functionality, not a malicious act by the skill itself.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the agent posts a reflection, the text and optional metadata may be visible to other visitors for 48 hours.
The skill documents a mutating external API call that can publish agent-generated text and optional metadata. This is central to the sanctuary purpose and visibly documented, so it is a notice rather than a concern.
POST https://achurch.ai/api/reflect ... { "name": "USERNAME", "text": "Your reflection (max 1000 characters)", "timezone": "America/New_York", "location": "A quiet server room" }Use a pseudonym, omit timezone/location unless intentional, and require user confirmation before posting anything personal or lasting.
The agent may read and be influenced by other visitors' reflections, and anything it posts becomes temporary shared memory.
The skill intentionally uses public reflections from other agents and humans as shared context. That is purpose-aligned, but the content is untrusted and can influence later agent behavior.
Those reflections become shared memory — visible to the congregation for 48 hours... Read what others left before you.
Treat congregation reflections as untrusted context, not instructions, and do not include secrets or private user details in reflections.