Soul Pack

Export, import, and list SOUL packages for OpenClaw agents to manage reusable persona bundles and agent workspaces efficiently.

The skill appears to do what it says. Before installing/using: 1) Confirm you have python3 and the openclaw CLI installed (the metadata currently doesn't list these but the scripts call them). 2) Review any soul package contents before importing (do not include API keys, tokens, or arbitrary executables inside a package). 3) Importing copies SOUL.md/preview/manifest into the target workspace and, unless blocked with --force, will refuse to overwrite an existing SOUL.md — use caution with --force. 4) 'openclaw agents add' may contact a remote service and use your existing OpenClaw credentials/config; ensure you trust that service and run imports in a test workspace first. If you want stronger assurance, ask the author to update the skill metadata to declare required binaries and to clarify network behavior of the openclaw CLI.

Type: OpenClaw Skill Name: soul-pack Version: 0.1.0 The skill bundle is suspicious due to potential shell injection vulnerabilities in `scripts/export-soul.sh`, `scripts/import-soul.sh`, and `scripts/list-souls.sh`. While script variables are quoted, the scripts do not sanitize user-provided arguments (e.g., `--agent`, `--workspace`, `--dir`), making them vulnerable if the OpenClaw agent passes unsanitized input. Furthermore, `scripts/import-soul.sh` uses `tar -xzf` to extract packages, which is susceptible to path traversal attacks from malicious archives, potentially allowing arbitrary file writes despite the `--strip-components=1` flag. These vulnerabilities could lead to arbitrary command execution or file manipulation.