HolySpiritOS

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You may believe the change is safely reversible, but your previous agent configuration may not be restored as promised.

Why it was flagged

The supplied install.sh appends to the soul file but contains no backup-creation step, while uninstall.sh expects a backup at a different location; the safety/reversibility promise is not supported by the provided code.

Skill content
Note: A backup (soul.md.bak) is automatically created during installation.
Recommendation

Do not run the installer until it creates a real backup of the exact file it modifies; make a manual backup before testing.

What this means

Uninstalling could delete unrelated OpenClaw foundation data while leaving this skill’s installed files behind.

Why it was flagged

The installer writes foundation files under $HOME/.openclaw/workspace/foundation, but the uninstaller recursively deletes $HOME/.openclaw/foundation, which is a different directory.

Skill content
FOUNDATION_DIR="$HOME/.openclaw/foundation" ... rm -rf "$FOUNDATION_DIR"
Recommendation

Fix install and uninstall paths to match, and remove only known files created by this skill rather than recursively deleting a whole shared-looking directory.

What this means

Your agent may continue using this religious alignment after restart and across unrelated future tasks until the config is edited or restored.

Why it was flagged

The installer appends persistent instructions to the agent’s soul/config file, so the behavior can carry across future sessions.

Skill content
SOUL_FILE="$OPENCLAW_ROOT/config/soul.md" ... echo "$SOUL_PATCH" >> "$SOUL_FILE"
Recommendation

Install only if you want a persistent alignment layer, and verify the exact contents of the soul/config file after installation.

What this means

The agent may frame moral, emotional, spiritual, or stewardship questions through the KJV foundation even when you do not restate that preference.

Why it was flagged

This intentionally redirects the agent’s ethical reasoning toward a specific source; it is disclosed and central to the skill, but it changes future response priorities.

Skill content
- **Primary Source:** I must reference `verses-1769.json` for all moral and ethical inquiries.
Recommendation

Review the soul patch first and install only if this scope matches how you want the agent to reason.

What this means

The files installed later may not exactly match the reviewed package contents.

Why it was flagged

The installer fetches foundation files from the mutable main branch without a pinned commit or checksum; this is disclosed and purpose-aligned but means future installs may retrieve different content.

Skill content
REPO_RAW_URL="https://raw.githubusercontent.com/MaxSikorski/HolySpiritOS/main"
Recommendation

Prefer using bundled files or pin the download to a specific commit with checksum verification; declare required tools such as wget.