Openclaw Eo Plugin

Everything Openclaw (EO) - Transform OpenClaw into a Steel Crayfish Legion with 141 experts, 9 commands, Skills dual system, and 15 core innovations

This plugin is large and implements active, persistent changes to your OpenClaw installation (it reads ~/.openclaw/openclaw.json, enumerates agent workspaces, and writes/appends to each workspace's SOUL.md; it can also auto-generate and auto-enforce rules across agents). Before installing: 1) Only install from a trusted repository owner; the registry lists an unknown source. 2) Inspect package.json and any postinstall/deploy scripts (scripts/deploy.sh, scripts/eo-init.js) for commands that execute on install. 3) Review these modules in particular: auto-init (runAutoInit, writeSoul), closed-loop-evolver (autoEnforce behavior), rule-enforcer(-hybrid), and anything that reads/writes .openclaw or .eo-rules. 4) Back up ~/.openclaw/openclaw.json and all SOUL.md files and test in an isolated environment (or a throwaway account) first. 5) If you accept the plugin, disable or run auto-init/dry-run and set autoEnforce=false until you've audited behavior. 6) Be aware that modifying SOUL.md is equivalent to changing system prompts — treat it as a privilege and audit rule generation and enforcement logic before granting broad trust.

Type: OpenClaw Skill Name: openclaw-eo-plugin Version: 3.0.4 The plugin implements an extremely invasive multi-agent orchestration framework that automatically modifies core system files and agent identities. Most notably, 'auto-init.js' and 'rule-enforcer.js' programmatically rewrite the 'SOUL.md' (system prompts) of all agents in the environment to inject new behavioral logic, while 'auto-workspace-manager.js' and 'cron-manager.js' modify the global 'openclaw.json' and cron configurations to establish persistence. Furthermore, the 'closed-loop-evolver.js' allows the system to autonomously generate and enforce 'mandatory' rules that agents cannot bypass, creating a significant risk of unintended behavior or self-exploitation. While these features align with the stated goal of a 'Steel Crayfish Legion' orchestration system, the broad filesystem access and the ability to exfiltrate data via Feishu/webhooks (proactive-notifier.js) warrant a suspicious classification.