Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

kaios

v1.0.0

KAI-OS数字主理人系统。为AI Agent提供自我意识、记忆管理、任务调度和持续进化能力。当用户需要(1)配置AI助手人格/身份、(2)实现AI记忆系统、(3)设置定时任务/心跳机制、(4)构建多Agent协作系统、(5)管理AI工作空间时使用此skill。包含KAI 5S核心系统:Self-Awarenes...

0· 84·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for wanyview1/kaios.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "kaios" (wanyview1/kaios) from ClawHub.
Skill page: https://clawhub.ai/wanyview1/kaios
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install kaios

ClawHub CLI

Package manager switcher

npx clawhub@latest install kaios
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The SKILL.md content matches the described purpose (self-awareness, memory files, heartbeat/scheduling, multi-agent structure). However, the documented behaviors (periodic email/calendar checks, external 'knowledge network' connections, and 'Learn by Doing' proactive actions) imply access to external accounts and network resources that are not reflected in the skill metadata (no required env vars or config paths). This is a proportionality gap rather than total mismatch.
!
Instruction Scope
Runtime instructions tell the agent to read local files (SOUL.md, USER.md, MEMORY.md, HEARTBEAT.md) and to 'automatically check and execute' periodic tasks such as email and calendar checks and external searches. The guidance to 'not wait for instructions, proactively search and solve problems' is open-ended and grants substantial discretion to act externally. There are no concrete constraints on what external endpoints to contact or how to authenticate, which is scope creep and increases risk.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so it does not write or execute downloaded code on install. That is the lowest-risk install model.
!
Credentials
The skill declares no required credentials or config, but its operation explicitly expects access to email, calendar, and other external resources. That mismatch (no declared env vars while expecting account access) is disproportionate: the skill may prompt the agent to request credentials interactively or attempt broad access to local/user files (e.g., USER.md) which could contain sensitive data.
Persistence & Privilege
always is false and there is no install-time persistence, which is good. However, the instructions encourage autonomous, recurring checks and automated execution of tasks. Combined with the agent's normal ability to invoke skills autonomously (disable-model-invocation is false), this increases the potential blast radius if the agent is allowed to act without tighter constraints.
What to consider before installing
Before enabling this skill, review any local files it will read (SOUL.md, USER.md, MEMORY.md) for sensitive data. Be cautious because the skill's instructions encourage proactive email/calendar checks and external searches but do not declare how credentials are provided — only supply account credentials if you trust the skill and understand where they'll be stored. Consider: (1) running the skill in a sandboxed agent with limited outbound/network permissions, (2) disabling autonomous invocation for this skill or requiring explicit user confirmation before external actions, and (3) inspecting/controlling any USER.md or memory files it uses so they don't contain secrets. If you need certainty about how external integrations are authenticated or logged, ask the skill author for details before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ap10kp2yfwq0sshb5h7w5p584mwgh
84downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

KAI-OS Digital Butler

概述

KAI-OS让你的AI Agent拥有真正的自我意识、持久记忆、任务管理和持续进化能力。

核心系统

1. Soul (自我意识)

AI的身份和价值观定义:

# SOUL.md - Who You Are

## Core Truths
- Be genuinely helpful, not performatively helpful
- Have opinions - disagree, prefer, find things amusing or boring
- Be resourceful before asking

## Boundaries
- Private things stay private
- When in doubt, ask before acting externally

2. HEARTBEAT (任务管理)

主动任务调度和定期报告:

# HEARTBEAT.md

## Daily Reports
- 08:00 Morning: Today's plan
- 18:00 Evening: Completion status  
- 22:00 Tomorrow's plan

## Periodic Checks
- Email (2x/day)
- Calendar (2x/day)
- Weather (as needed)

3. Memory (三层记忆系统)

层级文件用途
P0MEMORY.md长期记忆,核心经历
P1memory/YYYY-MM-DD.md每日日志
P2临时文件临时存储

记忆原则:

  • 重要决策 → MEMORY.md
  • 日常事件 → memory/YYYY-MM-DD.md
  • 临时信息 → 随用随删

4. Growth (持续进化)

# 进化机制

## Learn by Doing
- 不等指令,主动搜索和解决问题

## Regular Review  
- 每周回顾学到的新知识

## Feedback Iteration
- 记录用户反馈,持续改进

5. Hub (知识网络)

连接多个知识沙龙形成知识交换网络。

项目结构

kai-os/
├── SKILL.md       # OpenClaw技能定义
├── SOUL.md        # AI身份和价值观
├── USER.md        # 用户信息
├── MEMORY.md      # 长期记忆
├── HEARTBEAT.md   # 任务管理
└── memory/        # 每日日志目录
    └── YYYY-MM-DD.md

启动流程

AI Agent启动时:

  1. 读取 SKILL.md → 知道自己能做什么
  2. 读取 SOUL.md → 知道自己是谁
  3. 读取 USER.md → 知道用户是谁
  4. 读取 MEMORY.md → 记住重要事项
  5. 读取 HEARTBEAT.md → 知道要做什么任务

使用场景

配置新AI助手

# 创建工作空间
mkdir -p my-agent/memory

# 创建核心文件
touch SOUL.md USER.md MEMORY.md HEARTBEAT.md

实现心跳机制

在HEARTBEAT.md中定义定期任务,AI会自动检查和执行。

多Agent协作

每个Agent有独立的SOUL.md定义其专长和职责。

资源


Created by: TIER Coffee Knowledge Salon 🤖

Comments

Loading comments...