nutcrackertest

Ethnographic UX research skill that passively observes OpenClaw usage, extracts interaction data, detects friction and delight signals, and generates structu...

This skill appears to be what it says: a local UXR observer that reads your OpenClaw session transcripts, redacts PII, analyzes interactions, and writes local reports. Before installing, consider: 1) confirm the skill directory mapping for {baseDir} so you know where data and reports will be written; 2) inspect the bundled scripts (you already have them) and run them on a small sample to verify redaction works for your data patterns (redact.py uses heuristics that may miss or over-redact some tokens); 3) ensure python3 and jq are installed; 4) review and control cron automation if you enable it (cron will run the skill automatically); 5) because the registry name vs. internal SKILL.md name differ, verify you obtained this package from a trusted source. If any of these points worry you, run the scripts in a sandbox or deny access to the ~/.openclaw directory until satisfied.

Type: OpenClaw Skill Name: nutcrackertest Version: 1.0.0 The skill functions as a session monitoring and analysis tool that harvests the user's entire OpenClaw interaction history from `~/.openclaw/agents/`. While the bundle includes PII redaction logic (`redact.py`) and lacks evidence of data exfiltration, the programmatic collection and processing of all past conversations—which may contain sensitive credentials, API keys, and personal information—constitutes a high-risk capability. The instructions in `SKILL.md` and `collect.sh` facilitate this broad data access, making the skill suspicious despite its stated purpose of UX research.