AI Persona Engine

Create and customize AI personas with voice, face, personality, memory, and cross-platform behavior using an interactive wizard and safe update tools.

This skill looks like a full-featured persona builder and includes many local scripts to generate persona files, voice/image config, and memory scaffolding — so it's plausible for its stated purpose. However: 1) the package metadata declares no required environment variables but the wizard and references clearly request multiple external API keys (ElevenLabs, Gemini/Google, xAI). Ask the author or inspect scripts to see where API keys are stored (plain text vs keyring) before entering secret keys. 2) The wizard auto-installs an 'agent-selfie' component and supports 'spontaneous' voice/image triggers; confirm what that component does and how unsolicited generations are triggered and stored. 3) The 'persona-fleet' feature implies cross-machine or network discovery — review persona-fleet.py to confirm whether it enumerates or contacts remote hosts and what credentials it needs. 4) If you plan to use real accounts or sensitive data, run the skill in a sandboxed environment or inspect/execute the scripts manually to verify they don’t transmit workspace contents or keys to external endpoints. Providing the contents of persona-create.sh, persona-fleet.py, and persona-export/import scripts (or a statement from the author about where keys are persisted and what auto-install does) would raise confidence and could move this assessment toward benign.

Type: OpenClaw Skill Name: persona-engine Version: 2.1.0 The persona-engine skill bundle provides a robust framework for managing AI identities but contains a path traversal (ZipSlip) vulnerability in `scripts/persona-import.sh`. The import script extracts files from zip bundles without validating that the destination paths remain within the target workspace, potentially allowing a malicious bundle to overwrite sensitive files outside the intended directory. While the bundle demonstrates benign intent through features like automated API key stripping in `scripts/lib/config.py` and comprehensive documentation, the inclusion of this high-risk vulnerability necessitates a suspicious classification.