ClawSouls

This skill appears to implement a persona manager and generally does what it says, but proceed cautiously. Key considerations: - The skill executes the external 'clawsouls' npm CLI using npx (npx --yes), which will download and run code from the npm registry on demand — review the upstream clawsouls package (https://github.com/clawsouls / https://www.npmjs.com/package/clawsouls) before allowing that. - The skill’s manifest does not declare required binaries (node/npm/npx) or credentials, but SKILL.md expects them; ensure you have Node tooling and understand which tokens (registry or LLM provider keys) you will need for publish/test flows. - clawsouls commands will read and write workspace files in your home directory (~/.openclaw or ~/.zeroclaw) and may back up or overwrite persona-related files. If you care about safety, inspect or run the CLI in a sandbox or review its source before use. - If you only need read-only listing or browsing, prefer inspecting the registry (clawsouls.ai / GitHub) rather than running npx installs. If you must run the CLI, consider installing it explicitly (npm install -g clawsouls) or auditing the package contents / checksum first. - If you plan to publish/login, do not provide tokens until you review the publishing/auth flow and repository trustworthiness.