SERA Lexicon & Unified Dynamics
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: sera-lexicon Version: 1.0.0-alpha The `scripts/movie_of_the_day.py` script includes functionality to read the content of an arbitrary file specified via a command-line argument (`sys.argv[1]`). While this is plausibly intended for analyzing agent history files, it introduces a file access capability that could be leveraged by a malicious agent instruction to read sensitive files on the system. There is no clear evidence of intentional harmful behavior such as data exfiltration, persistence, or remote code execution within the provided files.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If a transcript contains forged or inaccurate SERA state markers, the skill may produce misleading trajectory or coaching suggestions.
The skill intentionally uses recent conversation context as state for future behavior. That is core to its purpose, but incorrect or untrusted state blocks could skew its coaching outputs.
By parsing the last 3 turns from the context window, the model rehydrates its momentum and avoids the "goldfish" reset.
Use this with trusted conversation histories and treat generated state/coaching as advisory, not authoritative memory.
The agent may shift tone or behavior according to the skill's internal state model.
The coach can emit agent-behavior directives such as changing mode or applying grounding. This is consistent with the skill's stated coaching purpose, but it can shape responses if treated as an instruction.
return "REDLINE. Immediate ⊥ Ground required. Transition to Empath mode."
Keep user instructions and task goals primary; apply these coaching outputs only when they are relevant and explicitly useful.