SELF LEARNING SKILL V3

持续主动学习，深度分析问题根因，识别模式，横向扩展，迁移知识，避免重复错误，实现举一反三的自我迭代能力。

This skill is mostly documentation for a proactive "self-learning" assistant. That by itself is not dangerous — but the SKILL.md and example files repeatedly instruct the assistant to perform autonomous network actions and to look for credentials (e.g., ~/.github-token, ~/.openclaw/, environment variables, use of 'clawhub login' or GitHub CLI). Yet the skill metadata declares no required credentials. Before installing, consider: 1) Where will the agent run and what filesystem/env access will it have? 2) Will the agent be allowed to act autonomously on your behalf (push to repos, call CLIs, search files)? 3) If you install, restrict the agent's runtime permissions (no access to secret files or sensitive env vars), require explicit user consent before any credential use, and run the skill in a sandboxed account. Ask the author/maintainer to clarify exactly what automated actions the skill will take, to add explicit consent prompts before any credential access, and to declare any required credentials in the manifest. If you cannot verify those safeguards, avoid granting the agent access to sensitive tokens or enabling full autonomous invocation.

Type: OpenClaw Skill Name: self-learning-skill-v3 Version: 1.0.0 The skill bundle is a comprehensive framework designed to help an AI agent perform self-reflection, error tracking, and knowledge generalization (learning by analogy). The instructions in SKILL.md and EXAMPLES.md guide the agent to maintain an internal error log (ERROR_LOG.md) and a case study database to improve its performance over time. While the documentation mentions searching for authentication tokens (e.g., GitHub tokens), this is framed as a troubleshooting step for the agent's own deployment tasks rather than a credential harvesting attack. No evidence of data exfiltration, malicious execution, or unauthorized persistence was found.