RMN Soul

Automatically creates a recursive neural memory network, stores it on IPFS, and anchors its Merkle root on Base chain as an ERC-8004 identity NFT.

What to consider before installing/using this skill: - Private keys: The skill reads RMN_SPONSOR_KEY (if set), saves sponsorKey into a plaintext config.json under rmn-soul-data, and passes the key on the command line to cast. This can expose keys via files or process lists—do NOT provide your main wallet key. Use a throwaway sponsored wallet with minimal funds if you want to test. - Automatic transactions: autoAnchorDays defaults to 7; heartbeats can mark anchors as due. If a private key is configured, the skill may send transactions automatically. Disable autoAnchorDays (set to 0) or remove sponsorKey before running automated hooks. - Undeclared dependencies: The package/registry metadata does not declare required binaries, but scripts call node, ipfs, and Foundry's cast. Confirm those tools (and a safe RPC URL) are present before running. If you don't want on-chain behavior, omit install of cast and ipfs or avoid running anchor/register scripts. - Workspace access: setup scans many workspace files (MEMORY.md, SOUL.md, memory/*.md, .issues/*). Only run this in a workspace you are comfortable having scanned and written to. The skill will create rmn-soul-data in the workspace. - Network exposure: resurrect and anchor use public IPFS gateways and RPC endpoints—if you need to keep memory private, be aware content may be uploaded to IPFS unless ipfsEnabled is disabled or you control the node. - Hardening steps: review scripts yourself, run in an isolated/test workspace or container, set autoAnchorDays to 0, do not set RMN_SPONSOR_KEY (let the script save calldata for manual broadcast), or use a temporary wallet. If you want to use on-chain features, prefer using an offline signer or tooling that doesn't accept raw private keys on the command line. Overall: the code is consistent with its stated purpose, but the combination of undeclared dependencies, plaintext key persistence, command-line key usage, and auto‑anchor behavior warrants caution. Inspect and test in a safe environment before granting credentials or enabling automation.

Type: OpenClaw Skill Name: rmn-soul Version: 1.0.1 The skill bundle is designed for on-chain AI agent memory and identity, involving sensitive operations like handling private keys for blockchain transactions and uploading memory to IPFS. A critical shell injection vulnerability exists in `scripts/resurrect.js` where the `ipfs cat` command executes a CID fetched from on-chain metadata. A malicious actor could write a crafted CID to the blockchain, leading to arbitrary command execution on the agent when the `resurrect.js` script is run. Additionally, `scripts/anchor.js` uses `execSync` with a private key and subcommands, which, while intended for legitimate blockchain interaction, presents a high-risk attack surface.