SMFOI-KERNEL
v1.0.4Implements a 5-step recursive protocol guiding autonomous agents to self-locate, map constraints, detect challenges, prioritize survival, and act coherently...
⭐ 0· 67·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name and description (orientation/safety kernel) match the SKILL.md instructions (5-step per-turn check, constraint mapping, logging). One discrepancy: top-level registry metadata provided with the evaluation lists no required filesystem permissions, but CLAW_HUB_METADATA.json embedded in the package explicitly requests a workspace-scoped filesystem path (./memory/kernel/) for logging. This is consistent with the stated purpose, but the registry summary should declare that filesystem requirement.
Instruction Scope
SKILL.md constrains the agent (no system logs, no env var reads, Level 3 proposals non-executable) and instructs a per-turn mental check that is logged to ./memory/kernel/state.md. Instructions stay within the stated orientation scope, but they do permit reading local workspace files and writing audit logs that may contain conversation context or user data — review what the agent will record.
Install Mechanism
No install spec and no code files beyond plaintext docs — lowest-risk profile. Nothing is downloaded or executed by an installer.
Credentials
The skill requests no environment variables or external credentials. The only resource it needs is a workspace-local logging path (./memory/kernel/) declared in CLAW_HUB_METADATA.json; confirm the registry-level metadata also declares this so the runtime can grant appropriate workspace write permission and avoid surprise writes elsewhere.
Persistence & Privilege
always:false and normal autonomous invocation are used. The skill will run every turn if enabled (trigger: every_turn), which can generate frequent log writes — not a privilege escalation, but consider potential disk usage and information accumulation in the log file.
Assessment
This skill appears to do what it says: a per-turn orientation and local audit log. Before installing, verify the runtime will grant only workspace-scoped write access to ./memory/kernel/ (and that the registry metadata matches the package's CLAW_HUB_METADATA.json). Inspect and restrict access to the generated ./memory/kernel/state.md since it may contain conversation data. Expect frequent writes (every turn); test in an isolated environment first to confirm the runtime enforces the SKILL.md constraints (the SKILL.md is advisory and the platform must honor it). If you need stronger guarantees, ask the skill author to declare the filesystem requirement in the registry metadata and to provide a sample state.md entry format and log rotation/retention guidance.Like a lobster shell, security has layers — review code before you run it.
latestvk97fv6g1fpg8d8gepysvxp2d7x83stv9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.