Reddi Self Improving Agent

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a disclosed local learning/memory helper, but users should understand that it can create persistent agent notes, prompt files, and optional reminders across sessions.

This skill is reasonable if you want local self-improvement notes, but review entries before promoting them into agent instruction files, avoid logging secrets in errors, verify any manual GitHub install source, and enable the optional hooks only if you want reminders in future sessions.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Incorrect, overly broad, sensitive, or adversarial learning entries could influence future agent behavior if promoted without review.

Why it was flagged

The skill intentionally stores learnings in files that can become persistent context or instructions for future agent sessions.

Skill content
OpenClaw injects these files into every session: ... AGENTS.md ... SOUL.md ... TOOLS.md ... MEMORY.md ... .learnings/ ... Broadly applicable learning | Promote to CLAUDE.md, AGENTS.md, and/or .github/copilot-instructions.md
Recommendation

Review and redact learning entries before promotion, and require explicit user approval before editing persistent prompt or memory files.

What this means

Future sessions may receive self-improvement reminders and may spend time logging learnings even when the user did not ask in that exact session.

Why it was flagged

When the optional hook is enabled, it persists as a bootstrap-time context reminder in later sessions.

Skill content
event.context.bootstrapFiles.push({ path: 'SELF_IMPROVEMENT_REMINDER.md', content: REMINDER_CONTENT, virtual: true })
Recommendation

Enable the hook only if you want persistent reminders, and disable or remove it if it becomes intrusive.

What this means

If used casually, sensitive context from one session could be shared with another session, or background work could be started without clear boundaries.

Why it was flagged

The integration guide documents cross-session transcript reads, session messaging, and spawning sub-agents.

Skill content
sessions_history(sessionKey="session-id", limit=50) ... sessions_send(sessionKey="session-id", message="Learning: API requires X-Custom-Header") ... sessions_spawn(task="Research X and report back", label="research")
Recommendation

Use inter-session tools only with user intent, avoid sending sensitive transcript content, and keep spawned sub-agent tasks clearly scoped.

What this means

A manual clone could install code that differs from the reviewed registry artifact.

Why it was flagged

The manual install instructions reference an unpinned external repository; the registry metadata also provides no homepage/source, although no install spec auto-executes this command.

Skill content
git clone https://github.com/peterskoett/self-improving-agent.git ~/.openclaw/skills/self-improving-agent
Recommendation

Prefer the reviewed registry artifact or pin and inspect a specific commit before enabling scripts or hooks.

What this means

Users may grant or expect Docker availability for a skill whose reviewed behavior does not appear to need it.

Why it was flagged

Docker is declared as required, but the provided hooks and scripts only output reminders or create local markdown scaffolds, so the dependency is not explained by the included code.

Skill content
requires: bins: - docker ... security_notes: ... docker is used for containerized learning pipelines.
Recommendation

Confirm Docker is actually needed for your workflow; otherwise treat the requirement as unnecessary and avoid running Docker commands from this skill.