Self Improving Agent

PassAudited by ClawScan on May 10, 2026.

Overview

This skill is purpose-aligned for saving agent learnings, but users should be aware it can create persistent agent guidance, optional hooks, and cross-session context sharing if enabled.

This appears suitable if you want an agent to keep reusable learning notes. Before installing, decide whether you want persistent memory files and optional hooks enabled, review any promoted rules before they affect future sessions, and avoid logging secrets or private transcript details.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Future sessions may use saved learnings as guidance, so inaccurate or sensitive entries could affect later answers or workflows.

Why it was flagged

The skill intentionally stores and promotes learnings into files that can influence future agent behavior. This is central to the skill, but persistent instructions can carry forward mistakes, overbroad rules, or private context.

Skill content
| Broadly applicable learning | Promote to `CLAUDE.md`, `AGENTS.md`, and/or `.github/copilot-instructions.md` |
Recommendation

Review learning entries before promoting them to persistent instruction files, and avoid logging secrets, credentials, private transcripts, or overly broad behavioral rules.

What this means

Learnings or transcript content could be shared across sessions or delegated to sub-agents if the user or agent uses these tools.

Why it was flagged

The documentation describes reading other session transcripts, sending messages to sessions, and spawning sub-agents. This is disclosed as OpenClaw integration behavior, but cross-session context can contain sensitive or unrelated information.

Skill content
sessions_history(sessionKey="session-id", limit=50) ... sessions_send(sessionKey="session-id", message="Learning: API requires X-Custom-Header") ... sessions_spawn(task="Research X and report back", label="research")
Recommendation

Only share minimal learning summaries across sessions, confirm the target session, and avoid sending sensitive transcript details unless explicitly intended.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

If enabled, the agent will receive self-improvement reminders at startup, which may slightly steer future sessions toward logging learnings.

Why it was flagged

The optional hook injects a virtual reminder into agent bootstrap context. The hook is disclosed and opt-in, but it is persistent behavior once enabled.

Skill content
event.context.bootstrapFiles.push({ path: 'SELF_IMPROVEMENT_REMINDER.md', content: REMINDER_CONTENT, virtual: true })
Recommendation

Enable the hook only if you want persistent reminders, and disable it if it becomes intrusive or causes unwanted logging behavior.

What this means

It may be harder to verify exactly which package identity or version this artifact represents.

Why it was flagged

The bundled metadata differs from the supplied registry metadata, which lists a different owner ID, slug, and version. This does not show malicious behavior, but it creates a provenance/versioning ambiguity.

Skill content
"ownerId": "kn70cjr952qdec1nx70zs6wefn7ynq2t", "slug": "self-improving-agent", "version": "1.0.11"
Recommendation

Confirm the intended package identity and source before relying on updates or installing from the referenced GitHub/manual path.