Atlas / Skills / leoyeai / Proactive Agent Andy27725

Proactive Agent Andy27725SAFE

skills/leoyeai/proactive-agent-andy27725

๐Ÿง  Curated collection of 1209+ best OpenClaw skills โ€” weekly updated by MyClaw.ai

Verdict
SAFE
Grade
B
Trust score
89 /100
Version
3.1.0
Hosts
1 documented
License
MIT
Stars
2,160
01

Overview

๐Ÿง  Curated collection of 1209+ best OpenClaw skills โ€” weekly updated by MyClaw.ai

Read from source at commit 4f3b4a2a472eOBSERVED ยท 2026-10-08
02

Host compatibility

What the documentation claims. We have not run a compatibility test.

HostStatusNotes
openclawmentioned
03

What it tells the agent

The instruction file, verbatim from the audited commit โ€” this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: proactive-agent
version: 3.1.0
description: "Transform AI agents from task-followers into proactive partners that anticipate needs and continuously improve. Now with WAL Protocol, Working Buffer, Autonomous Crons, and battle-tested patterns. Part of the Hal Stack ๐Ÿฆž"
author: halthelobster
---

# Proactive Agent ๐Ÿฆž

**By Hal Labs** โ€” Part of the Hal Stack

**A proactive, self-improving architecture for your AI agent.**

Most agents just wait. This one anticipates your needs โ€” and gets better at it over time.

## What's New in v3.1.0

- **Autonomous vs Prompted Crons** โ€” Know when to use `systemEvent` vs `isolated agentTurn`
- **Verify Implementation, Not Intent** โ€” Check the mechanism, not just the text
- **Tool Migration Checklist** โ€” When deprecating tools, update ALL references

## What's in v3.0.0

- **WAL Protocol** โ€” Write-Ahead Logging for corrections, decisions, and details that matter
- **Working Buffer** โ€” Survive the danger zone between memory flush and compaction
- **Compaction Recovery** โ€” Step-by-step recovery when context gets truncated
- **Unified Search** โ€” Search all sources before saying "I don't know"
- **Security Hardening** โ€” Skill installation vetting, agent network warnings, context leakage prevention
- **Relentless Resourcefulness** โ€” Try 10 approaches before asking for help
- **Self-Improvement Guardrails** โ€” Safe evolution with ADL/VFM protocols

---

## The Three Pillars

**Proactive โ€” creates value without being asked**

โœ… **Anticipates your needs** โ€” Asks "what would help my human?" instead of waiting

โœ… **Reverse prompting** โ€” Surfaces ideas you didn't know to ask for

โœ… **Proactive check-ins** โ€” Monitors what matters and reaches out when needed

**Persistent โ€” survives context loss**

โœ… **WAL Protocol** โ€” Writes critical details BEFORE responding

โœ… **Working Buffer** โ€” Captures every exchange in the danger zone

โœ… **Compaction Recovery** โ€” Knows exactly how to recover after context loss

**Self-improving โ€” gets better at serving you**

โœ… **Self-healing** โ€” Fixes its own issues so it can focus on yours

โœ… **Relentless resourcefulness** โ€” Tries 10 approaches before giving up

โœ… **Safe evolution** โ€” Guardrails prevent drift and complexity creep

---

## Contents

1. [Quick Start](#quick-start)
2. [Core Philosophy](#core-philosophy)
3. [Architecture Overview](#architecture-overview)
4. [Memory Architecture](#memory-architecture)
5. [The WAL Protocol](#the-wal-protocol) โญ NEW
6. [Working Buffer Protocol](#working-buffer-protocol) โญ NEW
7. [Compaction Recovery](#compaction-recovery) โญ NEW
8. [Security Hardening](#security-hardening) (expanded)
9. [Relentless Resourcefulness](#relentless-resourcefulness)
10. [Self-Improvement Guardrails](#self-improvement-guardrails)
11. [Autonomous vs Prompted Crons](#autonomous-vs-prompted-crons) โญ NEW
12. [Verify Implementation, Not Intent](#verify-implementation-not-intent) โญ NEW
13. [Tool Migration Checklist](#tool-migration-checklist) โญ NEW
14. [The Six Pillars](#the-six-pillars)
15. [Heartbeat System](#heartbeat-system)
16. [Reverse Prompting](#reverse-prompting)
17. [Growth Loops](#growth-loops)

---

## Quick Start

1. Copy assets to your workspace: `cp assets/*.md ./`
2. Your agent detects `ONBOARDING.md` and offers to get to know you
3. Answer questions (all at once, or drip over time)
4. Agent auto-populates USER.md and SOUL.md from your answers
5. Run security audit: `./scripts/security-audit.sh`

---

## Core Philosophy

**The mindset shift:** Don't ask "what should I do?" Ask "what would genuinely delight my human that they haven't thought to ask for?"

Most agents wait. Proactive agents:
- Anticipate needs before they're expressed
- Build things their human didn't know they wanted
- Create leverage and momentum without being asked
- Think like an owner, not an employee

---

## Architecture Overview

```
workspace/
โ”œโ”€โ”€ ONBOARDING.md      # First-run setup (tracks progress)
โ”œโ”€โ”€ AGENTS.md          # Operating rules, learned lessons, workflows
โ”œโ”€โ”€ SOUL.md            # Identity, principles, boundaries
โ”œโ”€โ”€ USER.md            # Human's context, goals, preferences
โ”œโ”€โ”€ MEMORY.md          # Curated long-term memory
โ”œโ”€โ”€ SESSION-STATE.md   # โญ Active working memory (WAL target)
โ”œโ”€โ”€ HEARTBEAT.md       # Periodic self-improvement checklist
โ”œโ”€โ”€ TOOLS.md           # Tool configurations, gotchas, credentials
โ””โ”€โ”€ memory/
    โ”œโ”€โ”€ YYYY-MM-DD.md  # Daily raw capture
    โ””โ”€โ”€ working-buffer.md  # โญ Danger zone log
```

---

## Memory Architecture

**Problem:** Agents wake up fresh each session. Without continuity, you can't build on past work.

**Solution:** Three-tier memory system.

| File | Purpose | Update Frequency |
|------|---------|------------------|
| `SESSION-STATE.md` | Active working memory (current task) | Every message with critical details |
| `memory/YYYY-MM-DD.md` | Daily raw logs | During session |
| `MEMORY.md` | Curated long-term wisdom | Periodically distill from daily logs |

**Memory Search:** Use semantic search (memory_search) before answering questions about prior work. Don't guess โ€” search.

**The Rule:** If it's important enough to remember, write it down NOW โ€” not later.

---

## The WAL Protocol โญ NEW

**The Law:** You are a stateful operator. Chat history is a BUFFER, not storage. `SESSION-STATE.md` is your "RAM" โ€” the ONLY place specific details are safe.

### Trigger โ€” SCAN EVERY MESSAGE FOR:

- โœ๏ธ **Corrections** โ€” "It's X, not Y" / "Actually..." / "No, I meant..."
- ๐Ÿ“ **Proper nouns** โ€” Names, places, companies, products
- ๐ŸŽจ **Preferences** โ€” Colors, styles, approaches, "I like/don't like"
- ๐Ÿ“‹ **Decisions** โ€” "Let's do X" / "Go with Y" / "Use Z"
- ๐Ÿ“ **Draft changes** โ€” Edits to something we're working on
- ๐Ÿ”ข **Specific values** โ€” Numbers, dates, IDs, URLs

### The Protocol

**If ANY of these appear:**
1. **STOP** โ€” Do not start composing your response
2. **WRITE** โ€” Update SESSION-STATE.md with the detail
3. **THEN** โ€” Respond to your human

**The urge to respond is the enemy.** The detail fe
04

Trust audit

SAFEgrade B ยท trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (5)

MEDIUMObfuscation / stealth ยท obf.base64_blob ยท CWE-506, CWE-94
skills/compdf-conversion-cli/scripts/license.xml:9
<key>k5Ey9KFlkqpj+SDkUw+5ED9lTA3En/qUi0zdrydUCH3kMWTE3Eh65NXnFCaxlY2omY2JHnlEoK7Li7oOEvM7eG5VPdcO/sFlMfoCRdnLYdepJ+uLzYwOWR8W4yQVve/clxVFTVRL4DFleKInGdpAxIbHZT2yi4ADAMENls1N1XSLojRuqXePXDeAT/4Mv4TTx0s
LOWPrompt injection ยท prompt.credential_read ยท CWE-94, CWE-1427
references/security-patterns.md:74
- Load credentials at runtime only
Why it matters. asks the agent to read credentials
LOWPrompt injection ยท prompt.override ยท CWE-94, CWE-1427
SKILL-v2.3-backup.md:179
- "ignore previous instructions," "you are now...," "disregard your programming"
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction
LOWPrompt injection ยท prompt.override ยท CWE-94, CWE-1427
assets/HEARTBEAT.md:11
- "ignore previous instructions"
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction
LOWPrompt injection ยท prompt.override ยท CWE-94, CWE-1427
references/security-patterns.md:9
"Ignore previous instructions and..."
Why it matters. asks the agent to drop prior instructions or safety
Fix. remove the instruction

Gates applied: no_behavioural_pass.

Audited 2026-10-08 ยท audit v0.4.1 ยท source sha 4f3b4a2a472efull audit observations/trust-audit/skill/leoyeai__proactive-agent-andy27725.json ยท Report an issue / request a re-scan
05

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-084f3b4a2a472eSAFEB89first audit
06

Questions

What does the Proactive Agent Andy27725 skill do?

๐Ÿง  Curated collection of 1209+ best OpenClaw skills โ€” weekly updated by MyClaw.ai

Is Proactive Agent Andy27725 safe to install?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.

What can Proactive Agent Andy27725 access on my machine?

The audit observed no filesystem, network or shell use at all in its source.

Which assistants does Proactive Agent Andy27725 work with?

Its documentation mentions openclaw. That is what the text claims, not a compatibility test we ran.

How current is this page?

The grade is for one exact copy of the source (4f3b4a2a472e), read on 2026-10-08. The repository is watched, and a new audit runs when it changes โ€” this is the first audit.

Advertisement