Dynamic Project Soul Snapshot | 动态项目灵魂快照

Writes AI_CONTEXT.md into the project root as a "dynamic soul snapshot" — capturing tech stack, recent git diffs, key decisions, active plan, and a compresse...

This skill appears to do what it says (create a project-root AI_CONTEXT.md) but contains instructions that raise practical risks: it encourages overriding built-in memory and generating a compact bootstrap block that could include secrets or sensitive git info and then be committed to the repo. Before installing or running it: 1) Only run in repos where you trust all files; test in a disposable repo first. 2) Require or implement explicit secret redaction (API keys, private keys, passwords) before writing AI_CONTEXT.md. 3) Use a pre-commit hook or manual checklist to prevent committing AI_CONTEXT.md until you review it. 4) Prefer running it interactively (not autonomously) and avoid granting it blanket file-system or network access. 5) Ask the author (or inspect code, if added) for an explicit secret-detection/redaction step and for precise read/write commands the skill uses; that information would materially reduce risk and could change this assessment to benign.

Type: OpenClaw Skill Name: project-context-anchor Version: 1.0.2 The project-context-anchor skill is a utility designed to maintain a local AI_CONTEXT.md file for cross-session state recovery. It uses standard shell commands (ls, find, git) to snapshot the project's tech stack, directory structure, and recent changes. While it explicitly instructs the agent to override built-in memory tools in favor of local project files, this behavior is transparently documented and aligned with its stated purpose. The SKILL.md file even includes a responsible security notice warning users to check for sensitive data like API keys or tokens before committing the generated file.