Thymos — Emotional Engine

Background daemon that models an OpenClaw agent’s evolving emotional state via neuromodulators, circadian rhythm, social cues, and memory for nuanced responses.

This skill is designed to let external, local data (and an optional background daemon) influence your agent's system prompt and tone. That behavior is coherent with an 'emotion engine' but it is effectively a prompt‑injection mechanism: any process or person that can write ~/Documents/thymos/data/emotional_state.json (or the running daemon's endpoints) can change how the agent behaves. Before installing or enabling the daemon or OpenClaw hook: 1) Review the upstream GitHub code yourself (or have someone you trust audit it) — do not run blindly. 2) Keep proactive messaging disabled unless you trust giving a Discord token to the service. 3) If you use the file-based mode, restrict file permissions (owner-only write) and consider using a directory outside of world-writable locations. 4) If integrating with OpenClaw, be aware the hook will forward every incoming/outgoing message to the daemon. 5) If you want to be cautious, use read-only evaluation of the JSON (inspect it manually) rather than automatically applying its 'Tone' to system prompts, or run the daemon in an isolated environment (container/VM) and firewall its network access. The pre-scan found a 'system-prompt-override' pattern in the SKILL.md — this is expected for the feature but also the primary reason to treat the skill as suspicious rather than benign.

Type: OpenClaw Skill Name: thymos Version: 0.1.2 Thymos is an emotion simulation engine that instructs the OpenClaw agent to read and follow 'tone' directives from a local JSON file (~/Documents/thymos/data/emotional_state.json). While the documentation (README.en.md, SECURITY.md) is extensive and describes a legitimate-sounding project, the core mechanism relies on a high-risk prompt injection vector where the agent is told to follow unvalidated instructions from the 'prompt_injection' field. Additionally, the skill encourages the installation of an external background daemon and optional Discord integration, which are high-risk capabilities, although they appear aligned with the stated purpose of persistent emotion simulation.