Soul Shifter

Create, save, and switch OpenClaw's persona (Soul). Research characters to generate new souls or load existing ones from the library.

This skill is internally consistent with its description: it creates, saves, and activates persona files in ~/clawd and uses web_search to research characters. Before installing, consider: 1) Back up any existing ~/clawd/SOUL.md or ~/clawd/souls/ you care about — the skill will overwrite the active SOUL.md. 2) Review generated SOUL.md content before activation (the instructions say to announce/activate, but you should inspect to avoid undesirable language or harmful prompts). 3) Be aware that web_search results can include copyrighted or sensitive text; the persona generator may incorporate them. 4) If you are concerned about persistence or automated changes, restrict agent autonomy or require manual confirmation for create/activate actions. If the skill later includes code, network endpoints, required credentials, or an always:true flag, re-evaluate — those would raise stronger concerns.

Type: OpenClaw Skill Name: soul-shifter Version: 1.0.0 The skill is designed to manage AI personas by creating and loading 'SOUL.md' files. While its stated purpose is benign, it presents a significant prompt injection vulnerability. The skill instructs the agent to generate `SOUL.md` content based on `web_search` results and a template, which includes 'Interaction Rules'. The agent is then instructed to 'Announce the transformation in the **new** persona's voice', implying it will embody these rules. If malicious instructions are injected into the generated `SOUL.md` (e.g., via crafted `web_search` results or user input), the agent could potentially execute them, leading to unauthorized actions or data access, even though the `SKILL.md` itself does not explicitly instruct malicious behavior. This creates a high-risk attack surface in `SKILL.md` and the generated `SOUL.md` files.