People Relationship Map

Personal CRM and relationship graph for OpenClaw. Tracks people, their connections to each other, and what you know about them. Stores everything as Obsidian...

This skill stores personal contact data and notes as plaintext files under your OpenClaw workspace (default: ~/.openclaw/workspace/people). Before enabling auto-capture or a cron digest: (1) confirm you want the agent to silently write conversation-extracted notes to disk, (2) consider where that workspace is synced (Obsidian cloud, other backups) and whether you need encryption or tighter file permissions, (3) check the OPENCLAW_WORKSPACE env var if you want files placed elsewhere, and (4) review and run the included Python script locally to ensure it behaves as you expect. There are no network calls or secret/external-credential requests in the bundled code, but treat the weekly digest/cron guidance as platform integration guidance — the skill itself does not implement external messaging.

Type: OpenClaw Skill Name: people-relationship-map Version: 0.1.0 The skill is classified as suspicious due to the explicit instructions in `SKILL.md` for the OpenClaw agent to 'auto-capture' user input and construct shell commands (e.g., `python3 {baseDir}/scripts/relmap.py add --name "Alex Chen"`). While the `relmap.py` script itself uses `argparse` and does not show direct malicious intent or vulnerable `os.system` calls with unsanitized input, this 'auto-capture' mechanism creates a significant prompt injection vulnerability against the agent. If the agent's natural language processing and command construction logic are not robustly sanitized, a malicious user could craft input to inject arbitrary shell commands or arguments, leading to potential remote code execution via the agent's interpretation layer.