Personality Switcher
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: personality-switcher Version: 0.1.3 The skill bundle is classified as benign. While it performs high-privilege actions such as modifying the `HEARTBEAT.md` file for personality persistence (`install.sh`, `uninstall.sh`, `scripts/restore_personality.py`) and extensive file system operations (copying, renaming, deleting files and directories within `~/.openclaw/workspace/personalities/`), these actions are explicitly documented in `SKILL.md` and are central to the skill's stated purpose of managing AI personalities. All file operations are confined to the OpenClaw workspace and its designated subdirectories, and there is no evidence of data exfiltration, malicious execution, obfuscation, or prompt injection against the agent within the skill's own markdown instructions.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A personality you create or activate can keep shaping the assistant after restarts or conversation compaction.
The skill intentionally stores and reapplies persona instructions across sessions, meaning saved SOUL.md and IDENTITY.md content can continue influencing future agent behavior.
On every heartbeat, `restore_personality.py` reads this file and re-applies the active personality to the workspace root. **Result:** Your personality survives session restarts, conversation compacting, and heartbeat cycles.
Review personality SOUL.md and IDENTITY.md files before activating them, and use the default personality or uninstall path if you want to reset behavior.
The assistant’s personality files may be rewritten on heartbeat without a fresh command from you each time.
The installer adds a recurring heartbeat command that runs the restoration script automatically; this is disclosed and purpose-aligned, but it is persistent autonomous behavior.
echo "python3 ~/.openclaw/workspace/skills/personality-switcher/scripts/restore_personality.py" >> "$HEARTBEAT_FILE"
Install only if you want heartbeat-based persistence; verify HEARTBEAT.md after install and remove the managed section or uninstall the skill if you no longer want it.
If your OpenClaw Telegram channel is active, personality list/switch/create/rename/delete commands may become available through that channel.
The skill registers personality-management commands in the Telegram gateway configuration, expanding where these commands may be invoked if Telegram is enabled.
config_path = Path.home() / ".openclaw" / "openclaw.json" ... config["channels"]["telegram"]["customCommands"] ... "command": "personality"
Confirm your Telegram gateway access controls and remove the registered commands if you do not want remote chat-channel invocation.
Deleting a personality removes its saved files from the local personalities folder.
The delete command performs a real recursive local folder deletion for the selected personality; this is expected for the feature and protects the default personality, but it is still a destructive operation.
personality_folder = personalities_dir / personality_name
shutil.rmtree(personality_folder)Use delete and backup-cleanup commands deliberately, and keep separate copies of important personality files if you may need them later.
There is less external provenance to rely on, and setup side effects may not be fully captured by the install-spec metadata.
The package has limited provenance information and contains install/uninstall scripts despite the registry showing no install spec, so users should inspect the included scripts before trusting the setup behavior.
Source: unknown; Homepage: none; Install specifications: No install spec — this is an instruction-only skill. Code file presence: 12 code file(s): install.sh ... uninstall.sh
Review install.sh, uninstall.sh, and the Python scripts before installing, especially because they modify persistent OpenClaw configuration files.