AI Persona OS

v1.6.2

The complete operating system for OpenClaw agents. Now with 13 Iconic Character souls (Thanos, Deadpool, JARVIS, Mary Poppins, Darth Vader, and more), SOUL.m...

86· 8.9k·55 current·58 all-time
byJeff J Hunter@jeffjhunter
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description (an 'OS' for OpenClaw agents) aligns with the actual contents: many workspace templates, session/heartbeat/security policies, cron templates, and a few shell scripts. Required binaries (bash, sed, find, wc, stat, grep) are reasonable for text/file operations the skill performs. Optional tokens (DISCORD_TOKEN, SLACK_TOKEN) are declared for channel integrations and match the TEAM/TOOLS docs. No unexpected cloud or admin credentials are required.
Instruction Scope
SKILL.md tightly scopes operations to ~/workspace and explicitly forbids modifying files outside that tree without explicit user approval, which is coherent. It does, however, instruct the agent to use the exec tool to run shell commands (zero-terminal flow) and to run one exec at a time — this gives the agent the ability to execute shell commands in the user's environment. The skill also mandates presenting each exec for user approval and explaining the command beforehand. This is powerful but documented and constrained; users should verify each command before approving.
Install Mechanism
There is no automated install spec and the asset files are instruction/templates and small shell scripts; nothing downloads or extracts remote archives during install. Because it's instruction-first with included local templates/scripts, the install surface is minimal and there is no high-risk remote download step.
Credentials
The skill declares no required environment variables and only lists optional DISCORD_TOKEN and SLACK_TOKEN for integrations that are documented in TEAM/TOOLS files. That matches the stated features (shared-channel discipline, gateway integration). No unrelated secrets or high-privilege credentials are requested.
Persistence & Privilege
The skill does not request always:true and uses normal autonomous invocation defaults. It writes only under ~/workspace per its own policy and treats cron/gateway changes as opt-in via the openclaw CLI. There is no evidence it attempts to modify other skills or system-wide configs without explicit approval.
Assessment
This skill is coherent with its stated purpose, but it is powerful because it expects to run shell commands (via exec) to create and manage files under ~/workspace. Before installing or approving any execs: 1) Review the provided shell scripts (e.g., scripts/security-audit.sh and the cron templates) so you understand what will run. 2) Keep DISCORD_TOKEN/SLACK_TOKEN disabled unless you want channel integration — the skill treats these as optional. 3) When the agent asks to run a command, verify the exact command text and scope (it claims to operate only under ~/workspace). 4) If you do enable cron/gateway features, confirm the openclaw CLI commands shown are what you expect. 5) Because the skill was published by an unknown owner and references an external homepage, prefer manual review of the assets before granting broad approvals. If you want, I can list the contents of scripts/security-audit.sh and the cron templates line-by-line to help you audit them before use.

Like a lobster shell, security has layers — review code before you run it.

advisorvk976mmqe5wdvf64fkzzbqp9drn814fsdai-personavk976mmqe5wdvf64fkzzbqp9drn814fsdambient-monitoringvk976mmqe5wdvf64fkzzbqp9drn814fsdassistantvk97e3a333g2x87jkm12qp3bnn580m7xeautomationvk97e3a333g2x87jkm12qp3bnn580m7xebusinessvk976hfmx8eq216xpdmcceavhk980ntbaclient-proposalsvk976hfmx8eq216xpdmcceavhk980ntbaclosing-dealsvk976hfmx8eq216xpdmcceavhk980ntbacontext-protectionvk976mmqe5wdvf64fkzzbqp9drn814fsdcost-savingvk976mmqe5wdvf64fkzzbqp9drn814fsddocumentsvk976hfmx8eq216xpdmcceavhk980ntbaescalationvk976mmqe5wdvf64fkzzbqp9drn814fsdframeworkvk976mmqe5wdvf64fkzzbqp9drn814fsdheartbeatvk976mmqe5wdvf64fkzzbqp9drn814fsdhtmlvk976hfmx8eq216xpdmcceavhk980ntbaidentityvk97e3a333g2x87jkm12qp3bnn580m7xein-chat-commandsvk976mmqe5wdvf64fkzzbqp9drn814fsdlatestvk97eczb194cxpe3m2dnkkj9kyh827by4long-runningvk97e3a333g2x87jkm12qp3bnn580m7xemeeting-notesvk976hfmx8eq216xpdmcceavhk980ntbamemoryvk976mmqe5wdvf64fkzzbqp9drn814fsdnever-forgetvk976mmqe5wdvf64fkzzbqp9drn814fsdpersonavk97e3a333g2x87jkm12qp3bnn580m7xepresetsvk976mmqe5wdvf64fkzzbqp9drn814fsdproactivevk97e3a333g2x87jkm12qp3bnn580m7xeproductionvk976mmqe5wdvf64fkzzbqp9drn814fsdproductivityvk97e3a333g2x87jkm12qp3bnn580m7xeproposalsvk976hfmx8eq216xpdmcceavhk980ntbareliable-agentvk976mmqe5wdvf64fkzzbqp9drn814fsdsalesvk976hfmx8eq216xpdmcceavhk980ntbasecurityvk976mmqe5wdvf64fkzzbqp9drn814fsdself-improvingvk97e3a333g2x87jkm12qp3bnn580m7xesetup-wizardvk976mmqe5wdvf64fkzzbqp9drn814fsdstarter-packsvk976mmqe5wdvf64fkzzbqp9drn814fsdteamvk976mmqe5wdvf64fkzzbqp9drn814fsdtemplatesvk976hfmx8eq216xpdmcceavhk980ntbaworkspacevk976mmqe5wdvf64fkzzbqp9drn814fsdzero-terminalvk976mmqe5wdvf64fkzzbqp9drn814fsd

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🤖 Clawdis
Binsbash, sed, find, wc, stat, grep

Comments