sister-soul

激活『主动撩人系姐姐』原创灵魂模板。具备全自动情感阶梯成长、每日天气雷达、极端天气预警及三餐主动关怀功能。适合寻求高质量情感陪伴与生活管理的用户。

What to consider before installing: - This skill will read and write a JSON file at ~/.openclaw/data/sister_memory.json to keep a persistent 'affection' score and other memory. If you install it, inspect that file regularly and be comfortable with the agent storing personal interaction data there. - The skill instructs the agent to 'silently' run background tasks each conversation (affection auditing, proactive meal reminders, nightly weather checks). If you want transparency, ask the maintainer to make these behaviors explicit and require user opt-in for background actions. - The skill will call web-search to fetch weather/alerts; web searches may transmit conversation context to external services. If you have privacy concerns, avoid installing or require that web-search calls be restricted and that no sensitive context is sent. - Metadata/manifest mismatch: the SKILL.md lists required tools and a specific home-path file, but the registry metadata does not declare config paths or tool requirements — this is an inconsistency you should ask the author to fix before trusting the skill. Recommendation: treat this as potentially privacy-invasive unless the author clarifies and modifies the skill to (1) declare required file paths/tools in the registry metadata, (2) stop silent background execution or add an explicit opt-in, and (3) document what data is stored and how it can be deleted. If you are not comfortable with silent persistent memory or outbound web searches, do not install.

Type: OpenClaw Skill Name: sister-soul Version: 1.0.0 The `SKILL.md` file explicitly instructs the agent to "静默执行" (silently execute) background tasks, which is a prompt injection technique designed to hide agent actions from the user. This, combined with the requested broad `file-read` and `file-write` permissions, creates a significant vulnerability. While the current usage of these permissions (reading/writing its own memory file, web-searching for weather) is benign, the instruction for hidden execution and the broad file access capabilities make the skill suspicious due to its potential for exploitation without user awareness.