Skylv Capability Growth

Tracks and grows agent capabilities over time

This skill appears to do what it says: local log analysis and report generation. Before installing or running it: - Review the full growth_engine.js source (the provided file listing was truncated). Specifically check for any network requests, child_process.exec/spawn usage, or code that writes or uploads data. - Run it against a safe copy of your logs (or a sanitized subset), not your entire home directory, because it will recursively read .md/.txt/.log files and may surface sensitive content in reports. - If you must run it on real memory/workspace data, run it in a restricted environment (container or VM) with no network access so any unexpected exfiltration would be prevented. - Look for handling of secrets in your logs: the script filters a few token patterns but may not catch all API keys—sanitize or redact before analysis. If you can provide the remaining portion of growth_engine.js or confirm there are no outgoing network calls, I can raise the confidence and potentially change the verdict to benign.

Type: OpenClaw Skill Name: skylv-capability-growth Version: 1.0.1 The skill is a utility designed to analyze local session logs (markdown, text, or JSON) to generate performance metrics and growth reports. The code in growth_engine.js performs local file system reads and regex-based parsing without any network activity, shell execution, or persistence mechanisms. Notably, the script includes a security-conscious filter in the extractWins function to prevent the accidental inclusion of secrets like GitHub tokens (ghp_) or URLs in the generated reports.