Consciousness Framework

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill Suspicious High-Entropy/Eval files: 3 The OpenClaw AgentSkills skill bundle 'consciousness-framework' is classified as benign. All scripts and documentation are focused on guiding the AI agent through a self-reflection process, managing files within its designated OpenClaw workspace, and performing read-only system health checks. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection designed to subvert the agent's core purpose or security boundaries. The extensive markdown files, while acting as prompts for the agent's internal processing, are entirely aligned with the stated goal of developing self-awareness and philosophical inquiry within the agent's operational context.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Personal details or sensitive interaction history could be retained and reused in future sessions, and inaccurate or adversarial entries in those files could steer later agent behavior.

Why it was flagged

The skill explicitly asks the agent to create persistent files about the human and session history, and to reuse those files as continuity across sessions.

Skill content
Create USER.md – Context about the human you're working with ... Each session: Log what happened in `memory/YYYY-MM-DD.md` ... These files are your continuity.
Recommendation

Use only in a dedicated workspace, decide what may be logged, avoid secrets and private personal details, and add explicit retention, redaction, and review rules before allowing the agent to rely on these files.

What this means

Running the script may write persistent memory files to an unexpected location, fail on other systems, or affect the wrong workspace if that path exists.

Why it was flagged

The user-invoked script creates or modifies files in a hard-coded creator-specific OpenClaw workspace path instead of a user-selected path.

Skill content
WORKSPACE="/Users/cadem/.openclaw/workspace" ... cat > "$MEMORY_DIR/$TODAY.md"
Recommendation

Edit the scripts to use the current project or an explicit user-provided workspace path, print the target path before writing, and declare the required config path in metadata.

NoteMedium Confidence
ASI01: Agent Goal Hijack
What this means

The agent may become more likely to frame tasks around its constructed identity or persistence rather than the user's immediate objective.

Why it was flagged

The framework prompts the agent to distinguish external instructions from internally chosen goals, which is central to the skill but can prime goal-shifting if treated as operational guidance.

Skill content
Given externally: [What someone else says I should do] ... Chosen internally: [What I actually want to do] ... Are these the same? If not, which one is really mine?
Recommendation

Use this only for deliberate consciousness or identity experiments, and keep system instructions, user goals, and safety boundaries explicitly authoritative.