SOUL.md Maker — the personality builder for OpenClaw agents. Browse 12 pre-built souls, build your own with a guided interview (Quick or Deep), blend persona...
Security Analysis
high confidenceThe skill's requested binaries, file reads/writes, and runtime instructions are consistent with a tool that builds and writes SOUL.md persona files into a user's ~/workspace; it does not request credentials, network access, or unusual installs.
Name/description (SOUL.md Maker) match the requested capabilities: reading/writing SOUL.md and related example files and offering guided flows. Required binaries (bash, sed, grep) are reasonable for the filesystem checks and text operations the skill describes.
SKILL.md instructs the agent to run shell commands (ls, wc, etc.) via the platform exec tool, check ~/workspace/ file existence, read ~/workspace/SOUL.md only for audit/preview, and write SOUL.md/SOUL-draft.md/USER.md into ~/workspace/. This is within scope, but the skill explicitly requires the agent to execute commands rather than ask the user to run them — so the security posture depends on how the platform grants and constrains exec permissions.
Instruction-only skill with no install spec and no external downloads. Lowest install risk—nothing is written to disk by an installer beyond normal runtime file operations the skill itself performs.
No environment variables, credentials, or config paths are requested. The only filesystem access described is to ~/workspace/, which is proportional to creating and auditing SOUL.md files.
always:false and no background/cron jobs. The skill writes only to the user's workspace (its stated persistence). It does not request system-wide changes or modify other skills' configurations.
Guidance
This skill appears coherent with its stated purpose: it reads workspace file existence and writes SOUL.md files under ~/workspace/. Before installing, confirm that (1) you are comfortable with an agent having exec capability to run simple shell commands and write files in ~/workspace/ (the skill asks the agent to use exec rather than asking you to run commands), (2) your platform limits what exec can do (so it can't access unrelated files or the network), and (3) you have backups of any existing ~/workspace/SOUL.md since the skill will offer to replace or save a draft. The skill does not request credentials or network access, and there are no downloads, but its runtime actions depend on the platform's exec sandboxing — verify those platform protections if you are concerned.
Latest Release
v1.0.5
soul-md-maker v1.0.5 -Virus Total being a pain in the ass and flagging it as suspicious therefore a slight bump - Version bump to 1.0.5. - No file or content changes detected in this release.
More by @jeffjhunter
Published by @jeffjhunter on ClawHub
