Bundle Pluginstructural
Buddy Companionv1.0.0
OpenClaw buddy companion plugin - a cute AI companion with personality and reactions
openclaw bundles install clawhub:@openclaw-buddy/companionLatest release: v1.0.0Download zip
Capabilities
- Bundle format
- generic
- Host targets
- local
- Runtime ID
- @openclaw-buddy/companion
Compatibility
- Built With Open Claw Version
- >=0.1.0
- Plugin Api Range
- >=0.1.0
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the code: index.js implements a local 'buddy' companion (generation, persistence, rendering, reaction hooks). No unrelated services, binaries, or credentials are requested.
Instruction Scope
Runtime behavior is contained to generating reactions, registering hooks/tools, and appending reaction text to agent replies. The code reads/writes only local files under ~/.openclaw and checks an optional BUDDY_USER_ID env var; it does not reach out to external endpoints or access unrelated system files.
Install Mechanism
No install spec or external downloads; the skill ships as code files (CJS) and runs in the agent runtime. No archive downloads or third-party package installs were specified.
Credentials
No required environment variables or credentials are declared. The code optionally respects BUDDY_USER_ID (non-sensitive override). It accesses ~/.openclaw config files and uses hostname/username locally to derive an ID — appropriate for per-device deterministic behavior.
Persistence & Privilege
The plugin persists data in ~/.openclaw/extensions/buddy-companion (soul.json, mute.json) and reads ~/.openclaw/identity/device.json if present. This is scoped to its own extension directory and uses file permissions (0o600). This is expected, but it means the plugin will create and modify files on disk.
Assessment
This skill appears internally consistent: it implements a local buddy that stores state under ~/.openclaw/extensions/buddy-companion, may read ~/.openclaw/identity/device.json, and can inject reactions into the agent's replies. It does not request API keys or make network calls. Before installing, consider: 1) review or vet the code if you want full assurance (it's included here); 2) note it will create/modify files in your home directory (soul.json and mute.json) — you can remove that directory to uninstall; 3) it uses hostname/username to seed a deterministic ID if no device file or BUDDY_USER_ID is present (purely local derivation); and 4) if you prefer no automatic reactions, disable the extension in its config or set reactProbability to 0. If you need higher assurance, run the plugin in a restricted environment or inspect/modify the source before enabling.Verification
- Tier
- structural
- Scope
- artifact only
- Summary
- Validated package structure and extracted metadata.
- Scan status
- pending
Tags
- latest
- 1.0.0