Skylv Multi Persona Ai

PassAudited by VirusTotal on May 3, 2026.

Overview

Type: OpenClaw Skill Name: skylv-multi-persona-ai Version: 1.0.0 The skill is a legitimate tool designed to manage AI agent personality traits through a voting and consensus mechanism. The implementation in `consensus_persona_engine.js` is self-contained, performing only local file I/O on a hardcoded JSON file (`.consensus_votes.json`) and lacks any indicators of malicious intent such as network activity, data exfiltration, or dangerous execution sinks.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If a user copies the generated persona config into an agent with powerful tools, the agent may be encouraged to act with fewer confirmations.

Why it was flagged

The tool can generate an agent-initialization rule that reduces confirmation requirements when the consensus persona is autonomous.

Skill content
if (dim === 'autonomy' && data.consensus === 'autonomous') { config.rules.push('CAN execute without confirmation if confidence > 0.8');
Recommendation

Review generated rules before applying them, and avoid using the autonomous/no-confirmation rule for agents that can modify files, accounts, deployments, or other important resources.

What this means

Old or manually edited votes in the working directory can influence later generated persona configurations.

Why it was flagged

The script stores votes in a persistent local dotfile and later reads that file to generate persona consensus output.

Skill content
const voteFile = '.consensus_votes.json'; ... votes = JSON.parse(fs.readFileSync(voteFile, 'utf8')); ... fs.writeFileSync(voteFile, JSON.stringify(votes, null, 2));
Recommendation

Use the skill in a trusted directory, inspect or reset .consensus_votes.json when needed, and do not treat persisted votes as authoritative unless you trust their source.