← Back to Skills Marketplace
786
Downloads
2
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install opensoul-cloud
Description
Share anonymized OpenClaw configurations with the OpenSoul community. Use when user wants to share their agent setup, discover how others use OpenClaw, or ge...
Usage Guidance
This skill appears to do what it says (extract, anonymize, summarize, upload), but you should not blindly share your workspace until you confirm a few things:
- Preview the anonymized output every time (opensoul share --preview) and manually inspect it for anything sensitive before uploading. The anonymizer is best-effort regex/name/project extraction and can miss secrets or context.
- Inspect the upload behavior: the repository listing included many scripts but the upload implementation was omitted from the provided files. Ask for or review scripts/upload.ts to confirm exactly what JSON/files are POSTed and which Authorization header is used.
- Verify the upload destination. The API default is a supabase instance (https://vztykbphiyumogausvhz.supabase.co/functions/v1) while the public site is https://opensoul.cloud — confirm these endpoints belong to the same project and operator you trust.
- Be aware that registration creates and stores an API key in ~/.opensoul/credentials.json; treat that file like any secret. Delete it to de-register if you stop using the service.
- Consider sharing a sanitized test workspace first (no real secrets, minimal memory) to observe the end-to-end behavior and the resulting remote record.
If you want, I can:
- Inspect the missing upload.ts (if you provide it) to confirm upload fields and destination,
- Run a simulated preview/anonymization on a sample workspace to show what would be shared (if you paste sample outputs), or
- Suggest additional anonymization checks you can add before uploading (e.g., explicit .env detection, token pattern expansion, manual denylist).
Capability Analysis
Type: OpenClaw Skill
Name: opensoul-cloud
Version: 1.0.3
The skill bundle is classified as suspicious due to a significant prompt injection vulnerability. The `scripts/import.ts` file downloads arbitrary markdown files (SOUL.md, AGENTS.md, IDENTITY.md) from the external OpenSoul community (`opensoul.cloud`) into the user's agent workspace. The `SKILL.md` instructions then explicitly guide the OpenClaw agent to read and interpret these imported files, creating a direct vector for prompt injection. A malicious 'soul' uploaded to the OpenSoul platform could contain harmful instructions, potentially compromising the user's agent when the imported content is processed.
Capability Assessment
Purpose & Capability
The name/description (share anonymized OpenClaw workspaces) aligns with the code: extract.ts reads workspace files, anonymize.ts scrubs PII, summarize.ts produces a shareable profile, and other scripts handle register/list/delete/browse/import — all expected for a sharing service. The skill stores its own credentials in ~/.opensoul/credentials.json as part of registration, which is consistent with a service-backed sharing flow.
Instruction Scope
Runtime instructions require running the bundled CLI which will read many local files (SOUL.md, AGENTS.md, IDENTITY.md, TOOLS.md, MEMORY.md, cron jobs at ~/.openclaw/cron/jobs.json, skills folder, etc.). The SKILL.md explicitly instructs agents to preview anonymized output and ask for user confirmation before uploading, which is good. The anonymizer is best-effort (regex + name/project extraction) — it reads USER.md to extract the human name so it can be redacted, which is reasonable. However, one key file (upload.ts) was not provided in the truncated listing, so I cannot verify exactly what gets POSTed and to which endpoint or whether further data is appended before upload — this gap reduces assurance.
Install Mechanism
No install spec is included (instruction-only), so nothing is silently downloaded during install. The CLI expects Node.js and tsx available (SKILL.md asks users to npm i -g tsx). That is a low-risk, transparent runtime requirement.
Credentials
The skill declares no required environment variables, which is accurate. At runtime it uses/accepts OPENSOUL_API and OPENCLAW_WORKSPACE overrides and can use OLLAMA-related env vars for optional local LLM summarization. Registration contacts a third-party API and receives an opensoul API key which is stored in ~/.opensoul/credentials.json; that is expected for a service-backed uploader, but it is a sensitive credential stored locally. The service domain used by the API default (a supabase host) differs from the public 'https://opensoul.cloud' URL in constants.md — likely okay (separate frontend/backend), but worth confirming the upload destination.
Persistence & Privilege
always:false (no forced inclusion). The skill writes its own credentials to ~/.opensoul/credentials.json and writes imported souls to ~/.openclaw/workspace/imported/<id>/ — these are scoped to the skill and workspace. It does not request system-level privileges or try to change other skills' configs in the inspected code. Agent autonomous invocation is allowed (default) which is normal for skills; that combined with network uploads increases risk only if upload behavior is untrusted.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install opensoul-cloud - After installation, invoke the skill by name or use
/opensoul-cloud - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
Fix: Delete uses path param instead of query param
v1.0.2
Fix: Use tsx instead of ts-node. Add: list and delete commands.
v1.0.1
Fix: Use tsx instead of ts-node for Node.js compatibility
v1.0.0
Initial release. Share anonymized OpenClaw configurations with the OpenSoul community. Includes register, share, browse, suggest, and import commands. Supports local LLM summaries.
Metadata
Frequently Asked Questions
What is OpenSoul - Agent Soul Sharing and Community?
Share anonymized OpenClaw configurations with the OpenSoul community. Use when user wants to share their agent setup, discover how others use OpenClaw, or ge... It is an AI Agent Skill for Claude Code / OpenClaw, with 786 downloads so far.
How do I install OpenSoul - Agent Soul Sharing and Community?
Run "/install opensoul-cloud" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenSoul - Agent Soul Sharing and Community free?
Yes, OpenSoul - Agent Soul Sharing and Community is completely free (open-source). You can download, install and use it at no cost.
Which platforms does OpenSoul - Agent Soul Sharing and Community support?
OpenSoul - Agent Soul Sharing and Community is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenSoul - Agent Soul Sharing and Community?
It is built and maintained by fnaser (@fnaser); the current version is v1.0.3.
More Skills