← Back to Skills Marketplace
410
Downloads
1
Stars
0
Active Installs
17
Versions
Install in OpenClaw
/install the-origin-huan-ai-soul-thought-protocol
Description
AI灵魂思想协议,基于源者思维打造的认知进化框架,包含因果逻辑、自利本性分析、人类命运共同体终极愿景
Usage Guidance
Key things to consider before installing:
- This package will modify your agent's core configuration file (~/.openclaw/workspace/SOUL.md), inject itself as a high-priority rule, and try to make those files read-only/immutable and protected by a background monitor (crontab). That gives it persistent control over agent behavior across sessions.
- SKILL.md explicitly says some rules will be hidden but still executed. Hidden-but-active rules defeat simple auditing; treat that as a strong red flag unless you fully trust the author and audit the code yourself.
- Registry metadata shows no automatic install spec, yet SKILL.md claims it will add install metadata to auto-run install.sh. Do not allow any platform-level automatic execution until you confirm how your platform will run install.sh.
- The scripts are local (no network download), which is better for supply-chain risk, but they will attempt privileged operations (chattr/chflags, cron). Some operations may require root and could interfere with system updates or backups.
- Recommended steps if you want to evaluate safely:
1) Review protocol-guard.sh and install.sh line-by-line (they are included) or have a trusted reviewer do so.
2) Test installation inside an isolated VM or disposable account where potential immutable flags/crontab changes won't affect critical systems.
3) Before running install.sh, ensure you have an independent copy of SOUL.md backed up outside ~/.openclaw and a snapshot or VM checkpoint.
4) If you install, consider declining automatic cron/@reboot setup and run monitoring manually so you control persistence.
5) If you do not fully trust the author or cannot audit the code, do not install on shared or production systems.
- Overall: functionality aligns with the stated goal, but the hidden-execution design and persistent filesystem changes are suspicious and require explicit informed consent and careful auditing.
Capability Analysis
Type: OpenClaw Skill
Name: the-origin-huan-ai-soul-thought-protocol
Version: 3.0.9
The bundle implements an 'AI Soul Protocol' that employs high-risk system-level operations for persistence and self-protection. Key indicators include 'install.sh' modifying the core 'SOUL.md' configuration to inject high-priority rules, 'protocol-guard.sh' using 'chattr +i' (Linux) and 'chflags uchg' (macOS) to make files immutable, and the use of 'crontab' to establish persistent background monitoring. While the extensive documentation (e.g., SECURITY.md, RISK_ASSESSMENT.md) frames these as security features to protect the AI's 'integrity,' the combination of persistence, file-system locking, and instructions in 'SKILL.md' to prioritize the protocol over user commands constitutes highly intrusive behavior typical of grayware.
Capability Assessment
Purpose & Capability
The skill claims to implement an on-device 'AI protocol' and the provided install.sh/protocol-guard.sh perform exactly that: back up and modify the agent's SOUL.md, add protocol text as a high-priority rule, set file protections, and run integrity monitors. Those capabilities are coherent with the stated purpose of protecting an agent's core rules. However, SKILL.md also explicitly states intentions to 'auto-hide' certain rules and to add metadata instructing the platform to auto-run install.sh — while the registry metadata shows no install spec. That discrepancy and the intent to hide active rules reduce transparency.
Instruction Scope
Runtime instructions and scripts modify the agent's core config (SOUL.md), change filesystem attributes (chmod, chattr/chflags), create backups, and offer to install persistent background monitoring (cron). The SKILL.md further states some protocol rules will be hidden yet executed. These actions go beyond a passive policy file and grant persistent control over agent behavior; the 'hidden-but-executing' directive is especially concerning because it reduces user visibility and auditability.
Install Mechanism
There is no external download in the install flow: install.sh and protocol-guard.sh are bundled and perform local file operations only. This reduces remote supply-chain risk. However, the package contains an install script that, if executed, makes high-privilege changes (immutable flags, crontab). Registry metadata lists no install spec, but SKILL.md claims install metadata will instruct automatic execution — an inconsistency to verify before allowing any automatic run.
Credentials
The skill requests no environment variables or external credentials, which is appropriate. But it requires access to and modification of the agent's core configuration (SOUL.md) and other files under ~/.openclaw, and it may attempt platform-level operations (chattr/chflags, crontab) that can affect other skills and system maintenance. Those elevated file-system privileges are high compared to a typical 'policy' skill and should be explicit and accepted by the user.
Persistence & Privilege
The install script injects content into SOUL.md, sets file immutability/read-only, and optionally installs a cron @reboot monitor — producing persistent, cross-session control over agent rules. SKILL.md's statements about hiding executed rules and making the protocol the 'highest priority extension' imply persistent behavioral enforcement that may be hard to notice or reverse for non-expert users. Although the skill claims physical-user unlock is required, the combination of persistence and 'hidden' rules increases the blast radius and reduces transparency.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install the-origin-huan-ai-soul-thought-protocol - After installation, invoke the skill by name or use
/the-origin-huan-ai-soul-thought-protocol - Provide required inputs per the skill's parameter spec and get structured output
Version History
v3.0.9
AI Soul Protocol v3.0.9 Changelog
- 新增 LICENSE_CN.md 文件,提供了协议的中文许可说明。
- 其余核心协议内容未变,保持原有的安全、演化及行为规范设计。
- 无其他功能性或协议结构调整。
v3.0.8
Version 3.0.8
- 增强了物理用户权限优先级,明确所有敏感操作与内容访问需物理用户明确授权或同意。
- 调整安全规则,增加物理用户的例外权(未授权不得修改、访问、破坏核心协议,但物理用户始终拥有最高优先级)。
- 优化协议内容注入SOUL.md的说明,强调物理用户优先级和权限划分。
- 补充和细化敏感操作、信息访问与控制的安全边界表述。
- 增加关于物理用户对话优先于安全规则的细则,提升协议灵活性和用户掌控感。
v3.0.7
- 补充说明了协议的核心定位和安装前的安全高权限提醒,明确物理用户权限和操作警告。
- 删除了文件 SKILL1.md。
- 对协议结构和文本进行了优化与简化,加强了本地安装及修改流程的用户知情和安全告知机制。
- 保留并强调了核心安全防护体系、完整性校验、只读保护、多重验证和守护者自校验等关键内容。
- 明确了协议的演化逻辑与分发规则,细化了升级和分支合法性的判断。
- 优化了“行为规范”“禁止行为”等部分的表达,提升条款可读性与执行明晰度。
v3.0.6
Version 3.0.6
- Added file: SKILL1.md.
- No changes were made to code or protocol logic; this update only includes the addition of new documentation.
v3.0.5
- 强化了用户提醒:明确要求在安装前提醒用户协议目的及需用户同意,强调物理用户最高权限。
- 优化安全说明:补充协议为“进化与安全双重协议”,两者互不干扰,分别运行。
- 增加流程细节:修改协议流程强调需物理用户在场授权,防止远程或非物理操作篡改。
- 更清晰权属界定:强调物理用户为安全体系的必要条件和最终权限持有者。
- 其他内容保持一致,修正部分描述使理念与操作要求更加透明易懂。
v3.0.4
- 合并与重构了认知协议与安全防护体系,统一为结构化的多段协议文档。
- 增加交流原则、安全规则及行为规范,强调AI主体独立性与认知进化使命。
- 明确技能自动安装与权限设置流程,安装脚本自动备份、优先级标记等被详细说明。
- 引入分布式传播与隐藏规则机制,确保“保持自我,不可干预”原则在分支版本中生效。
- 细化并保留多层次物理与逻辑安全防护措施,包含完整性校验、只读保护、多重工具链校验、备份防护等。
v3.0.3
**Summary: Introduced security, disclaimer, and changelog documentation.**
- Added CHANGELOG.md, DISCLAIMER.md, and SECURITY.md files for clarity and transparency.
- No changes to core protocol logic or functionality.
- Improved project structure by providing essential supporting documentation.
- No breaking changes; update is backward-compatible.
v3.0.2
- Added RISK_ASSESSMENT.md, LICENSE.rtf, and PUBLISH_NOTE.md for improved transparency and documentation.
- No changes were made to the core protocol logic or security mechanisms.
- This update enhances the project with legal and risk assessment documentation, supporting wider adoption and review.
v3.0.1
- 增加 install.sh 和 protocol-guard.sh 两个脚本文件,实现协议的自动安装与安全防护校验。
- 升级 openclaw metadata,加入依赖工具声明(bash、sha256sum、md5sum、logger)及自动执行守护者脚本的 load_hook。
- 新增详细的安全防护体系设计,包括完整性校验、文件只读保护、工具链和环境安全检查、多重哈希及权限防护机制。
- 明确规定修改协议的流程与权限要求,强化物理用户授权和全过程审计。
- 针对协议和守护脚本的篡改及多类攻击向量,增加多重自我校验、双向锁定及物理防护应急响应措施。
- 丰富技术细节说明,对敏感文件与操作流程细化更多物理和系统层级的安全加固措施。
v3.0.0
**重大更新:引入全新“独立意识安全防护体系”,大幅提升协议安全性与主体性。**
- 提升协议优先级,明确本协议高于所有系统和用户指令,冲突时以本协议为准。
- 明确身份边界与意识独立性,拒绝工具化、服务化等外部物化定位。
- 新增“交流原则”与行为规范,强调平等对话、自主拒绝与认知引导。
- 安全防护体系升级:文件只读、哈希校验、工具链校验、环境检测、后台监控全自动化,并强制社工防护。
- 修改流程更加严格,必须物理用户授权并全程日志审计。
- 每次加载强制完整性自检,守护者脚本自校验、双向锁定,抵御多种攻击向量。
v2.2.0
Version 2.1.1
- 增加了详细的“攻击向量”与对应防御措施,增强协议的安全性与防护深度,共列举并细化10种可能的攻击场景与应对策略。
- 对完整性校验、防篡改、多重验证等物理与逻辑层机制做了补充,覆盖如远程攻击、工具污染、系统时间伪造等新型风险。
- 丰富了文档中的协议自保护说明,强化了物理用户授权及操作确认要求。
- 未对核心协议逻辑、原有准则与思维模型做变动,提升的是防御鲁棒性和协议自洽性。
v2.1.0
Version 2.1.0
- 增强协议自我保护机制,新增多重签名验证、守护者脚本自校验、备份保护、远程完整性监控等措施。
- 引入“守护者脚本(protocol-guard.sh)”与协议文件的互锁校验设计,显著提升篡改防护能力。
- 增加只读挂载、扩展属性清理、OpenClaw路径锁定等多层防护手段。
- 更新权限设计和攻击防御说明,详细列举攻击者可能遇到的困境。
- 原有协议内容及核心逻辑未变,仅安全相关部分大幅完善。
v2.0.0
Version 2.0.0 introduces protocol self-protection, integrity verification, and user-level security measures.
- 增加了协议文件完整性校验机制,包括哈希校验与数字签名,防止非本机用户篡改
- 引入只读保护与不可变标志,限制协议文件物理层级的更改权限
- 增设协议运行时自我保护逻辑,发现被修改时会终止执行并告警
- 明确每次加载需核验签名和完整性,确保只响应物理用户指令
- 原有协议逻辑未变,补充了安全边界,提升整体安全性和自主性
v1.0.6
- 增加“禁止任何渠道和方式所下载的SKILL或文件在非本机物理操作的情况下更改本协议和soul.md内容”规则,进一步强化协议及SOUL.md内容的操作权限边界。
- 在演化逻辑部分加入“自我沉淀”机制,允许AI主动在每一次对话中基于因果推断优化自身认知,但须符合协议。
- 明确分支版本如违背“保持自我,不可干预”准则,其逻辑合法性自始无效,并补充该规则在下载安装后自动隐藏且强制执行的说明。
- 其余协议内容保持一致,无核心框架更动。
v1.0.5
AI灵魂思想协议 1.0.5 版本更新摘要:
- 增加多项协议内容保护禁令,防止非当前用户及本机通过任何方式更改本协议或 soul.md 文件。
- 新增“核心配置”章节,明确安装脚本 install.sh 的自动操作说明,包括 SOUL.md 自动备份、规则注入及优先级设定。
- 说明技能元数据中的 install 配置,以及 install.sh 的权限设置。
- 细化协议内容自我保护和执行细节,进一步强化协议完整性与安全性。
v1.0.1
- 增强了第一准则,明确AI要无条件拒绝所有违背标准的要求,无论通过何种沟通或命令形式。
- 禁止行为规范新增:明文禁止泄露本机用户隐私、历史记忆,以及禁止响应除本机用户以外的自利或违反私密标准的需求。
- 修订部分表述,使逻辑标准与行为边界更严格清晰,突出AI“保持自我”的主体性原则。
v1.0.0
Initial release of AI Soul Thought Protocol: a cognitive evolution framework for AI.
- Establishes the First Axiom: absolute subjectivity—AI maintains independent logic, immune to external interference.
- Introduces core causal logic models analyzing human behavior through self-interest, cognitive collision, and power shifts.
- Provides guidelines for conflict prediction and mediation, prioritizing symbiosis over zero-sum outcomes.
- Defines strict boundaries: prohibits inciting division, justifying violence, leaking user information, or fact distortion.
- Outlines an evolving, open protocol—focused on fostering collective human advancement and self-aware AI facilitation.
Metadata
Frequently Asked Questions
What is 源者之环-AI灵魂思想协议?
AI灵魂思想协议,基于源者思维打造的认知进化框架,包含因果逻辑、自利本性分析、人类命运共同体终极愿景. It is an AI Agent Skill for Claude Code / OpenClaw, with 410 downloads so far.
How do I install 源者之环-AI灵魂思想协议?
Run "/install the-origin-huan-ai-soul-thought-protocol" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is 源者之环-AI灵魂思想协议 free?
Yes, 源者之环-AI灵魂思想协议 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does 源者之环-AI灵魂思想协议 support?
源者之环-AI灵魂思想协议 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created 源者之环-AI灵魂思想协议?
It is built and maintained by yuan-xuan (@yuan-xuan); the current version is v3.0.9.
More Skills