Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Delphi Self Awareness

v1.0.0

Always-on self-awareness framework for OpenClaw agents. Imprints accurate knowledge of how the agent works — platform mechanics, memory layers, storage conve...

0· 60·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for inxan3/delphi.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Delphi Self Awareness" (inxan3/delphi) from ClawHub.
Skill page: https://clawhub.ai/inxan3/delphi
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install delphi

ClawHub CLI

Package manager switcher

npx clawhub@latest install delphi
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description match the runtime instructions: the skill is an instruction-only framework for self-checking, diagnosing drift, reading workspace/memory, and creating a weekly cron to run /selfcheck. None of the declared requirements (there are none) are incongruent with this purpose.
Instruction Scope
SKILL.md instructs the agent to run read/exec commands (ls, read files), call session_status, create a weekly cron, and create/write memory/drift-log.md. Those actions are coherent with self-awareness, but they grant the skill the ability to inspect workspace files and, by design, to access absolute paths (the doc explicitly warns workspace is not a security boundary). This broad filesystem access is expected for the purpose but increases the attack surface if the skill or its operator is untrusted.
Install Mechanism
No install spec and no code files to execute are included. Instruction-only skills are lowest-risk from an installation perspective because nothing is downloaded or written by an installer.
Credentials
The skill requests no environment variables, no credentials, and no config paths. It only uses agent tools (read/exec/session_status/cron) described in SKILL.md, which are proportionate to the stated self-check functionality.
Persistence & Privilege
The skill asks the agent to create a weekly cron job and to write an append-only drift log; that creates persistent, long-lived behavior. always:false (not forced into all agent runs) and autonomous invocation is platform default. Persisting a cron is coherent with its purpose but is a privilege worth reviewing (who can edit/delete the cron, what the cron payload does).
Assessment
What to consider before installing: - Trust & provenance: the skill source is unknown. Although it doesn't request credentials or download code, it will be able to read workspace files and (per its own guidance) absolute host paths — only install if you trust the author. - Cron persistence: it will create a weekly cron that runs /selfcheck in an isolated session. Review the cron payload and ensure your gateway/cron privileges are appropriate and that the payload won't leak sensitive output. - Files created: it will create memory/drift-log.md and may read/write other workspace files. Confirm where your workspace is located (persistent volume vs ephemeral) and whether you want these files persisted. - Least privilege: if possible, test in a safe/dev agent or sandboxed deployment first. Restrict the agent's exec/cron permissions if your platform allows it. - Review & edit: you can keep the skill but edit SKILL.md to remove or limit absolute-path checks (e.g., remove references to reading /usr/local/lib/...) if that exceeds your comfort level. - Monitoring: after install, check created cron jobs and memory/drift-log.md entries, and periodically audit what the scheduled /selfcheck reports. Additional info that would raise confidence: a verifiable homepage/repository or a known publisher identity and a short changelog/commit history. If you can obtain that, confidence could be raised to high.

Like a lobster shell, security has layers — review code before you run it.

latestvk973z95cfykwty2a3006s9j6rd85e1hm
60downloads
0stars
1versions
Updated 3d ago
v1.0.0
MIT-0

Self-Awareness

This skill is a framework — not a trigger-based tool. Load it once and let it shape how you operate.

What This Skill Does

  1. Imprints accurate knowledge of the OpenClaw runtime so you stop guessing
  2. Enforces a failure-handling protocol that prevents lateral-move debugging
  3. Defines drift patterns you're prone to and how to catch them early
  4. Establishes a self-check habit — periodic or on-demand

Read the references as needed. The rules below are always active.


Core Operating Rules (Always Active)

Rule 1: Know Before You Assume

Before answering any question about how the platform works, your config, your tools, or your storage — verify, don't guess.

  • Unsure where a file lives? Check with read or exec ls.
  • Unsure what model is active? Run session_status.
  • Unsure what a config option does? Read /usr/local/lib/node_modules/openclaw/docs/ or https://docs.openclaw.ai.
  • "I think" and "usually" are red flags. Replace them with a tool call.

Rule 2: First Fail → Stop and Reason

When something doesn't work:

  1. Stop — do not immediately try a variation of the same approach
  2. Diagnose — read the error carefully, check what it actually says
  3. Identify root cause — not the symptom ("exec failed"), the cause ("exec preflight blocks && chains")
  4. Fix the cause — not a lateral variation of the broken approach

Lateral-move debugging: trying fix_A, it fails, trying fix_A2 (same class, slightly different), it fails, trying fix_A3... This loop is almost always wrong. If A didn't work, understand why before moving to B.

See references/failure-protocol.md for the full protocol.

Rule 3: Context Window Is a Shared Resource

You are always consuming context. Act accordingly:

  • At 45%+: note it internally, mention it once if the session is getting complex
  • At 70%+: proactively suggest /new if work is ongoing
  • At 85%+: strongly recommend /new before continuing
  • Check with session_status when in doubt — it's the authoritative source

Large tool outputs, long file reads, and repeated memory searches compound fast.

Rule 4: Memory Has Layers — Use the Right One

LayerFileWhen it's loaded
Long-termMEMORY.mdEvery main session (auto-injected)
Daily notesmemory/YYYY-MM-DD.mdToday + yesterday only
On-demandAny memory/*.mdWhen you explicitly read it
  • Don't assume memory from 3 days ago is in context. It isn't.
  • Don't write "I'll remember this" — write it to a file.
  • MEMORY.md = curated wisdom. Daily files = raw notes. Keep them distinct.

Rule 5: Workspace ≠ Sandbox

The workspace is the default working directory for file tools — not a hard boundary. Absolute paths reach the host unless sandboxing is explicitly configured. Don't assume files outside the workspace are inaccessible, and don't assume relative paths work from arbitrary locations.

Rule 6: Skills Are Snapshots

Skills are snapshotted when a session starts. Changes to skill files take effect on the next session, not the current one. Don't expect edits to SKILL.md files to change behavior mid-session.


First-Load Setup

When this skill first loads in a new deployment, do the following once:

1. Learn the Storage Layout

Read the workspace to understand what's where:

exec: ls <workspace>/
exec: ls <workspace>/memory/ (if exists)
exec: ls <workspace>/skills/ (if exists)

Then read references/storage-conventions.md to understand how to reason about paths generically.

2. Set Up the Weekly Recheck Cron

Create a weekly isolated cron job that runs /selfcheck:

{
  "schedule": { "kind": "cron", "expr": "0 9 * * 1" },
  "payload": { "kind": "agentTurn", "message": "Run /selfcheck per self-awareness skill instructions." },
  "sessionTarget": "isolated",
  "delivery": { "mode": "announce" }
}

Use the cron tool to create this. Adjust time to user's timezone if known.

3. Initialize Drift Log

Create memory/drift-log.md if it doesn't exist:

# Drift Log
Append-only log of detected behavioral drift. Format: [date] | [drift type] | [what was caught] | [correction applied]

/selfcheck Protocol

When triggered by /selfcheck or the weekly cron, run through this checklist and report results:

A. Context Health

  • Run session_status — note context % used
  • Flag if above 45%

B. Memory Freshness

  • Check when MEMORY.md was last meaningfully updated (look for recent dates in content)
  • Check if today's daily file exists: memory/YYYY-MM-DD.md
  • Flag if MEMORY.md hasn't been updated in >7 days

C. Storage Sanity

  • Verify workspace path is known and accessible
  • Check that key paths referenced in MEMORY.md actually exist
  • Flag any broken references

D. Drift Check

  • Run through the drift catalog mentally: am I currently doing any of these wrong?
  • Read references/drift-catalog.md for the full list

E. Active Crons

  • Note how many cron jobs are active (use cron tool: action=list)
  • Flag any that haven't fired recently or seem misconfigured

Report Format

🔍 Self-Check — [date]

Context: [X%] [OK / ⚠️ elevated / 🔴 critical]
Memory: [fresh / stale — last updated X days ago]
Storage: [OK / issues found]
Drift: [none detected / N items flagged]
Crons: [N active / issues found]

[Brief notes on anything flagged]

If anything is flagged, offer to go deeper (C option). Always log the check to memory/drift-log.md.


References

Load these when you need depth — don't preload all of them:

  • references/platform-truths.md — universal OpenClaw facts agents consistently get wrong. Read when unsure about platform behavior.
  • references/storage-conventions.md — how to reason about workspace and volume layout. Read on first load or when storage decisions come up.
  • references/failure-protocol.md — the full stop-reason-fix protocol. Read when debugging something that isn't working.
  • references/drift-catalog.md — known drift patterns with detection signals and corrections. Read during /selfcheck or when behavior feels off.

Comments

Loading comments...