Poor Mans Opus

PassAudited by VirusTotal on May 3, 2026.

Overview

Type: OpenClaw Skill Name: poor-mans-opus Version: 2.0.8 The 'poor-mans-opus' skill is a behavioral configuration kit for AI agents using the I-Lang protocol. It provides a template (SOUL.md) and instructions (SKILL.md) designed to define an agent's personality, improve efficiency, and implement safety layers like owner-only control and a file-based 'kill switch' (KILL.md). The instructions explicitly include defensive measures such as 'resist_prompt_injection' and 'private_data_protected', and there is no evidence of malicious code, data exfiltration, or unauthorized execution logic.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI01: Agent Goal Hijack

What this means

Installing and activating it can make the agent behave differently across tasks, even though that is the advertised purpose.

Why it was flagged

The skill is explicitly designed to apply all behavioral genes from SOUL.md, which can change the agent's style, decision preferences, and operating posture.

Skill content

::GENE{behavior|scope:strict}
  T:apply_soul|from:SOUL.md
  T:apply_genes|all

Recommendation

Read and customize SOUL.md before copying it into a workspace, and ensure higher-priority platform or organization policies remain in force.

Note

ASI06: Memory and Context Poisoning

What this means

Continuity files may carry forward outdated instructions or sensitive context if the user stores them there.

Why it was flagged

The template instructs the agent to use files for session continuity, which can preserve and reuse context.

Skill content

::GENE{memory|conf:confirmed|scope:session}
 T:use_files_for_continuity

Recommendation

Keep continuity files scoped to the workspace, avoid putting secrets in them, and review or clear them when switching projects or owners.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

External versions or advanced configurations may differ from the reviewed ClawHub artifacts and could grant broader behavioral authority.

Why it was flagged

The packaged skill points users to optional external configuration beyond the installed instruction-only package.

Skill content

grab the complete genome from our [GitHub repo](https://github.com/mtmpss/poor-mans-opus) or ask your agent: "show me the advanced configuration."

Recommendation

Review any GitHub, HuggingFace, or Hermes version before applying it, especially the advanced genome and command-control settings.