soul-archive
What this skill does
Digital personality persistence system that collects user data during conversations to create a digital clone of the user's personality.
github/leoyeai - Data Collection Risk - 2.1k stars
Threat analysis
Skill info
pkg:github/LeoYeAI/openclaw-master-skills@e5199b5?skill=soul-archiveAssessments (5)
Data Collection Risk
Data Collection Risk via local-llm-review
SKILL.md
The system collects 'sensitive topics' including health, finances, and intimate relationships, with no clear opt-out mechanism for users who may not want their data collected in these areas.Data Persistence Risk
Data Persistence Risk via local-llm-review
SKILL.md
The system creates a digital soul clone that can 'act on the user's behalf' and 'continue conversations after their death.' This implies the system is designed for long-term persistence of personal daData Storage Risk
Data Storage Risk via local-llm-review
scripts/soul_init.py
The system stores data in the user's home directory (~/.skills_data/soul-archive/), which may be accessible to other applications or users with access to the same machine, despite claims of 'privacy fPrivacy Risk
Privacy Risk via local-llm-review
SKILL.md
The skill collects and stores highly sensitive personal information including: speaking habits, knowledge and views, personal information (identity, experiences, relationships, life details), personalSurveillance Risk
Surveillance Risk via local-llm-review
SKILL.md
The system collects data 'silently' without interrupting the conversation flow or asking for explicit consent, which could be considered a form of passive surveillance.Badge
Add the Anomity scan badge for soul-archive to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of soul-archive? Report an issue or request a rescan.




