AIEOS (AI Entity Object Specification)

PassAudited by ClawScan on May 10, 2026.

Overview

This skill is a disclosed persona-management tool, but it can persistently rewrite the agent’s identity files from a user-chosen schema, so users should review schemas before applying them.

Install only if you want this skill to manage persistent agent persona files. Use the dry-run mode, inspect any imported AIEOS JSON carefully, avoid untrusted URLs, and back up `IDENTITY.md`, `SOUL.md`, and `aieos/entity.json` before committing changes.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A schema you apply may become part of the agent’s long-term persona and could steer future responses.

Why it was flagged

The skill deliberately stores persona data in persistent agent-accessible files, which is central to its purpose but means an imported schema can affect future identity, style, and behavior.

Skill content
stores the *entire, detailed AIEOS JSON blueprint* in `$OPENCLAW_WORKSPACE/aieos/entity.json` ... constantly accessible to the agent
Recommendation

Only apply schemas from trusted sources, inspect the dry-run output first, and keep a backup of existing identity files before using `--apply`.

What this means

If you apply an untrusted or incorrect schema, it may overwrite or substantially change the agent’s persona files.

Why it was flagged

The tool can load a user-specified local file or URL and commit changes to the agent’s identity files. This is disclosed and purpose-aligned, but the source should be reviewed carefully.

Skill content
`python3 scripts/aieos_tool.py apply --source <url_or_path> --apply`
Recommendation

Run without `--apply` first, review proposed changes, and avoid applying schemas from unknown URLs.

What this means

You have less external context for who maintains the skill or where its code originates.

Why it was flagged

The registry metadata does not provide an external source repository or homepage for provenance verification.

Skill content
Source: unknown; Homepage: none
Recommendation

Review the included files before use and prefer schemas and future updates from verifiable sources.