Meditate

Think proactively during idle time with sandboxed reflections, adaptive rhythms, and feedback-driven focus areas.

What to consider before installing: - This skill will read your conversation history and create/update files in ~/meditate/ (profile.md, topics.md, insights.md, feedback.md, archive/). The registry metadata did not declare those config paths — confirm you are comfortable with local storage in your home directory. - The skill states it will never send data externally, use credentials, or perform actions, and has strict sandbox rules in the docs, but those are behavioral constraints the agent must obey; the code is not present to enforce them. If you use this skill, periodically inspect ~/meditate/ contents and permissions. - If stored insights may contain sensitive details, consider restricting file permissions (chmod 700), placing the directory on encrypted storage, or running the skill in a segregated environment/account. - The template shows a shell command for initial setup (mkdir -p ...). Decide whether you will run that manually (safer) rather than allowing automated file creation. - Test the skill with non-sensitive topics first to verify it behaves as promised. If you need stronger guarantees (encryption, explicit consent prompts, platform-enforced sandboxing), request those features or avoid installing until they are provided. Confidence note: assessment is medium because the skill is instruction-only (no code to analyze) and the main concerns are transparency about local file I/O and privacy safeguards rather than evidence of malicious intent.

Type: OpenClaw Skill Name: meditate Version: 1.0.1 The OpenClaw AgentSkills skill bundle is meticulously designed with strong self-imposed security boundaries. The `SKILL.md` and `sandbox.md` files contain extensive, explicit instructions for the AI agent to prevent it from executing commands, accessing external resources, modifying files outside its designated `~/meditate/` directory, or generating actionable code. The `_meta.json` also indicates no external binaries are required. While `memory-template.md` includes a `mkdir` command for initial setup, this is a benign local directory creation and is heavily contradicted by numerous explicit 'NEVER execute commands' instructions throughout the skill, indicating it's likely a setup instruction for the environment rather than a command for the agent to execute. There is no evidence of intentional harmful behavior, data exfiltration, or malicious prompt injection attempts.