OpenClaw SillyTavern Plugin

SillyTavern-compatible roleplay plugin with character cards, long memory, multimodal output (TTS/image), and Generative-Agents-style companion.

This plugin implements the described RP features and includes real source code (not just an instruction-only skill), but exercise caution before installing. - Reconcile metadata: SKILL.md requests an `npm install` step and lists OPENCLAW_RP_LOCALE, while the registry summary omitted these—treat the SKILL.md as authoritative. - Sensitive actions: the plugin can read ~/.openclaw configs, persist session/memory data (SQLite), modify plugin config, and write the agent's SOUL.md (system persona). Those are valid features but allow persistent modification of agent prompts and autonomous proactive messages—only grant these capabilities deliberately. - Credentials: don’t expose unrelated high-privilege credentials. If you supply OPENAI_*/GEMINI_* keys, prefer least-privileged gateway accounts and isolate usage. - Deployment advice: review the repository yourself (or have a trusted admin do so), run npm install and the smoke tests in a sandboxed environment, back up SOUL.md and OpenClaw config before enabling persona sync, and disable/require approval for the companion_tick scheduler or any automatic proactive features until you’ve verified behavior. - If unsure: install in a non-production gateway, or request the publisher to clarify the metadata mismatches and provide an explicit security note about SOUL.md writes and scheduled companion behavior.

Type: OpenClaw Skill Name: openclaw-tavern Version: 0.1.0 The skill bundle provides a highly complex roleplay system with several high-risk capabilities that, while plausibly necessary for its stated purpose, create a significant security surface. Key concerns include the ability to programmatically modify the agent's core instruction file (SOUL.md) via 'src/openclaw/agentPersona.js', and broad filesystem access in 'src/openclaw/register.js' and 'src/core/commandRouter.js' for importing assets from local paths or remote URLs. Additionally, 'src/openclaw/register.js' executes external binaries (ffmpeg) via 'child_process.execFile' for media transcoding. While no explicit evidence of intentional data exfiltration was found, the plugin's ability to read environment variables and local configuration files containing API keys (OpenAI/Gemini) makes it a high-privilege component that should be monitored.