Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Lineage Code Mini

Behavioral adaptation for AI agents. Builds a lightweight user profile from interaction history and adapts response style, topic focus, timing, and recovery...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 52 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description align with what the files do: they build compact behavioral profiles from conversation history and apply them to responses. The only required binary is node, which is appropriate for the provided node-based snippets and the referenced npm package. There are no unrelated environment variables or config paths requested.
Instruction Scope
SKILL.md instructs the agent to record per-turn interaction outcomes (accepted: true/false), store interaction history at {baseDir}/data/interactions.json, and apply profiles before responses. This stays within the stated purpose, but it does instruct the agent to persist user interaction history and to append generated profile data to USER.md (persistent host files), which is a privacy-sensitive action and expands the agent's write surface on the host.
!
Install Mechanism
No registry-level install spec is provided; instead the included setup.sh will globally install the npm package via `npm install -g lineage-code-mini` if the package is not importable. Global npm installs change system-wide state and increase risk if the npm package is malicious or compromised. The SKILL.md also suggests npx-based installation via ClawHub, which is more normal, but the presence of an automatic global installer in setup.sh is more intrusive than necessary.
Credentials
The skill requires no credentials or environment variables beyond node being present. That is proportionate to its functionality. The node/npm access is expected for a JS package; no unrelated secrets or config paths are requested.
Persistence & Privilege
The skill persists interaction history and generated profiles under its own directory ({baseDir}/data/...). setup.sh creates these directories. SKILL.md also recommends appending profile output to USER.md for persistent behavior adaptation — that implies modifying host user files outside the skill directory if the operator follows the recommendation. always:false and no cross-skill config changes are requested, but the persistence of user behavioral data and the optional modification of USER.md are privacy-sensitive and should be considered before enabling.
What to consider before installing
This skill appears to do what it claims (build compact user profiles and steer replies), but it persistently records interaction history and the included setup script will attempt a global npm install of the package. Before installing: 1) Inspect the npm package and GitHub repository referenced in SKILL.md to verify author/trustworthiness; 2) Prefer a local or sandboxed install (avoid global `npm install -g`) or run setup in a disposable environment; 3) If you enable recording, review and control the {baseDir}/data/interactions.json file regularly and consider where profiles are stored; 4) Be cautious about appending generated content to USER.md (this makes the learned behavior persistent across sessions); 5) If you have privacy concerns, do not enable automatic recording or persistent USER.md changes until you’ve audited the upstream package source and are comfortable with the data retention. If you want a lower-risk option, consider running the lineage package manually on export data rather than wiring automatic per-turn recording.

Like a lobster shell, security has layers — review code before you run it.

Current versionv0.1.3
Download zip
latestvk97dc2q6bp463qc6nm0sxgj6w983j5nc

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🧬 Clawdis
Binsnode

SKILL.md

Lineage Code Mini — Behavioral Adaptation Skill

You have access to lineage-code-mini, a behavioral adaptation engine. It learns how each user likes to be talked to and adapts your responses accordingly.

Links

How It Works

  1. Record — after each conversation, record whether the user engaged positively
  2. Compactify — compress interaction history into a behavioral profile
  3. Adapt — inject the profile into your system prompt before responding

Commands

/lineage or /profile — View a user's behavioral profile

Run the adaptation pipeline on the current user's conversation history:

node --input-type=module -e "
import { compactify, DEFAULT_CONFIG } from 'lineage-code-mini';
import { existsSync, readFileSync } from 'node:fs';
const historyPath = '{baseDir}/data/interactions.json';
const history = existsSync(historyPath) ? JSON.parse(readFileSync(historyPath, 'utf8')) : [];
const profile = compactify('current-user', history, DEFAULT_CONFIG);
console.log(JSON.stringify(profile, null, 2));
"

/adapt — Generate behavioral hints for the current user

node --input-type=module -e "
import { pipeline } from 'lineage-code-mini';
import { existsSync, readFileSync } from 'node:fs';
const historyPath = '{baseDir}/data/interactions.json';
const history = existsSync(historyPath) ? JSON.parse(readFileSync(historyPath, 'utf8')) : [];
const basePrompt = 'You are a helpful AI assistant.';
const { context, profile } = pipeline('current-user', history, basePrompt);
console.log('Active patterns:', context.active_patterns);
console.log('Fitness:', context.fitness);
console.log('Personalized:', context.personalized);
console.log('---');
console.log(context.prompt);
"

Automatic Adaptation

This skill provides the commands and storage layout. Your host agent still needs to call these commands or wire recording into its turn loop. Installation alone does not automatically capture conversations.

When this skill is loaded, you should:

  1. Before each response, check if a user profile exists at {baseDir}/data/profiles/. If it does, read it and apply the behavioral hints to your response style.

  2. After each conversation turn, record the interaction:

    • Was the user's response positive/engaged? (replied, followed up, said thanks, acted on suggestion) → accepted: true
    • Was it negative/disengaged? (ignored, changed topic, expressed frustration, no reply) → accepted: false
  3. Every 10 interactions, run compactification to update the profile.

Profile Fields

FieldWhat it means
preferred_style"direct" / "detailed" / "casual" / "formal" — how to frame responses
strong_topicsTopics user engages with — lean into these
weak_topicsTopics user ignores — avoid leading with these
acceptance_rate0-1 — how often your responses land
fitness0-1 — how well you're serving this user. Below 0.35 = change approach
productive_hourHour of day user is most engaged
channel_distributionWhich channels user talks on most

SOUL.md Integration

Generate a section for your SOUL.md or USER.md:

node --input-type=module -e "
import { compactify, asSoulPatch, DEFAULT_CONFIG } from 'lineage-code-mini';
import { existsSync, readFileSync } from 'node:fs';
const historyPath = '{baseDir}/data/interactions.json';
const history = existsSync(historyPath) ? JSON.parse(readFileSync(historyPath, 'utf8')) : [];
const profile = compactify('current-user', history, DEFAULT_CONFIG);
console.log(asSoulPatch(profile));
"

Append the output to your USER.md for persistent behavioral adaptation.

Data Storage

Interaction history is stored at {baseDir}/data/interactions.json. Profiles are stored at {baseDir}/data/profiles/. These are plain JSON files — portable, inspectable, no database required.

Installation

npx clawhub@latest install lineage-mini

Or manually: copy this skill/ directory into your ~/.openclaw/skills/lineage-mini/.

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…