← Back to Skills Marketplace
neiljo-gy

secondme-skill

by acnlabs · GitHub ↗ · v0.1.2 · MIT-0
cross-platform ⚠ suspicious
115
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install secondme-skill
Description
A complete pipeline to build your AI Second Me: distill your identity from personal data, grow a private knowledge base, train a local model, and govern what...
Usage Guidance
This package appears to implement the orchestration it describes, but before running it you should: (1) confirm npx and python3 will be available on the runner (scripts expect them); (2) review any code that npx/openpersona will fetch and the contents of the persona-model-trainer's pack_integrate.py (not included here) — these will run arbitrary code; (3) note persona.json enables WebFetch and includes an external gateway URL — ensure you understand and approve any network calls before ingesting sensitive data; (4) run the scripts in an isolated environment (local VM/container) and with test/non-sensitive data first; and (5) ask the publisher for the missing integration script and an explicit list of remote dependencies (npm packages, endpoints) to improve confidence. If you cannot review the remote code that npx will fetch or the pack_integrate implementation, treat this package as higher risk.
Capability Analysis
Type: OpenClaw Skill Name: secondme-skill Version: 0.1.2 The secondme-skill bundle is an orchestration tool designed to manage a local-first AI persona pipeline, including identity distillation, data ingestion, and model training. The included shell and Python scripts (e.g., check-sync.sh, check-model-integration.sh, run-gates.sh) are standard utility and validation tools for ensuring data consistency and model integrity. The SKILL.md and persona.json files explicitly define safety boundaries, requiring human approval for high-risk actions and emphasizing privacy. While the skill requests broad permissions like Bash and WebFetch, these are functionally necessary for running the openpersona CLI and managing local training workflows, and no evidence of malicious intent or data exfiltration was found.
Capability Tags
crypto
Capability Assessment
Purpose & Capability
The skill is an orchestration package for building a 'Second Me' and its files (persona.json, gating scripts, reports) align with that goal. However, the package declares no required binaries yet the scripts clearly require npx and python3 (run-gates.sh checks for them). This mismatch is unexpected and should have been declared in the manifest.
Instruction Scope
Runtime instructions operate on local persona.json, generated pack and state files, which is consistent. But allowed-tools and persona.json permit WebFetch and Bash(npx:*, python:*). The scripts call npx openpersona (which will fetch code from npm/registry) and may call pack integration code in another skill (persona-model-trainer) that is not included here. Those networked actions and cross-skill execution broaden scope beyond purely-local file operations and could contact external endpoints or run code you haven't reviewed.
Install Mechanism
No install spec (instruction-only) is lower risk, but the runtime uses npx which will fetch and execute packages at runtime. There are no direct downloads from arbitrary URLs in the repo, but use of npx/openpersona implies dynamic remote code pulls — expected for this purpose but worth auditing.
Credentials
The skill requests no environment variables or credentials, which fits a local-first design. Persona.json contains an external gateway URL (acn-production.up.railway.app) and enables WebFetch — allowed but not justified explicitly by the orchestration docs. No tokens/keys are requested, but network access capability could be used to transmit data unless human approval controls are strictly enforced.
Persistence & Privilege
always is false and the skill does not attempt to modify other skills' config or claim elevated or persistent platform-wide privileges. Gate scripts are self-contained and update only pipeline state files in the repo.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install secondme-skill
  3. After installation, invoke the skill by name or use /secondme-skill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.2
v0.1.2: clean package, remove internal tooling files
v0.1.1
rewrite positioning copy: pipeline-first, user-value language
v0.1.0
Initial release of secondme-skill orchestration package. - Orchestrates anyone-skill, persona-knowledge, and persona-model-trainer into a local-first personal AI double workflow. - Defines clear stage contracts: init, ingest, distill, train, eval, integrate, and report. - Implements robust failure routing, human approval gates, and persona model integration requirements. - Establishes strict sync, release, and audit discipline via scripts and staged outputs. - Compatible with OpenPersona/OpenClaw/Cursor, emphasizing local-first operation with optional network interoperability.
Metadata
Slug secondme-skill
Version 0.1.2
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is secondme-skill?

A complete pipeline to build your AI Second Me: distill your identity from personal data, grow a private knowledge base, train a local model, and govern what... It is an AI Agent Skill for Claude Code / OpenClaw, with 115 downloads so far.

How do I install secondme-skill?

Run "/install secondme-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is secondme-skill free?

Yes, secondme-skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does secondme-skill support?

secondme-skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created secondme-skill?

It is built and maintained by acnlabs (@neiljo-gy); the current version is v0.1.2.

💬 Comments