my_soul_upgrade_skill

Manage and synchronize global and agent-specific Soul definitions using a two-layer template system with automated rebuild scripts.

Do not run the recommended build_all_souls.py until you inspect its contents and confirm its provenance. The SKILL.md tells the agent to run a Python script located in ~/.openclaw/scripts that is not included in the skill bundle — that script could perform arbitrary operations across all agent workspaces. Before installing or invoking the skill: (1) ask the publisher to provide the build_all_souls.py source or a trusted release link; (2) review the script for network calls, filesystem modifications, and privilege escalation; (3) prefer running it manually in a sandbox or as a non-admin user and back up SOUL files; (4) verify whether /home/admin is the correct path for your deployment or whether the instructions should use the agent's workspace variables; (5) if you cannot inspect the script or confirm the source, avoid granting the agent permission to run it autonomously.

Type: OpenClaw Skill Name: my-soul-upgrade-skill Version: 1.0.1 The skill bundle instructs the agent to modify system-level configuration files and execute an external Python script (~/.openclaw/scripts/build_all_souls.py) that is not included in the package. While the stated purpose of synchronizing 'Soul' templates across agent workspaces is plausible, the reliance on unverified external code execution and broad file system access across the /home/admin/.openclaw/ directory represents a significant security risk without explicit evidence of malicious intent.