
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
Give your AI a soul. Install, manage, and switch AI agent personas — built for OpenClaw, works with any SOUL.md-compatible agent.
ClawSouls is a persona sharing platform for AI agents. A Soul is a personality package — a set of markdown files that define how your AI thinks, talks, and behaves. Same LLM, completely different personality.
Browse available souls at clawsouls.ai.
ClawSouls works with any SOUL.md-compatible agent framework. The CLI auto-detects your installed platform and applies souls to the correct workspace.
| Platform | Directory | Status |
|---|---|---|
| OpenClaw | ~/.openclaw/workspace/ | ✅ Auto-detected |
| ZeroClaw | ~/.zeroclaw/workspace/ | ✅ Auto-detected |
| Clawdbot | ~/.clawdbot/workspace/ | ✅ Auto-detected |
| Moltbot | ~/.moltbot/workspace/ | ✅ Auto-detected |
| Moldbot | ~/.moldbot/workspace/ | ✅ Auto-detected |
| Custom | Any path | ✅ Via --workspace or --platform |
┌──────────────────────────────────────────────────┐
│ clawsouls install clawsouls/surgical-coder │
│ clawsouls use surgical-coder │
└──────────────┬───────────────────────────────────┘
│
▼ Auto-detect installed platform
┌────────────────────┐
│ ~/.openclaw/ ? │──yes──▶ Apply to ~/.openclaw/workspace/
│ ~/.zeroclaw/ ? │──yes──▶ Apply to ~/.zeroclaw/workspace/
│ ~/.clawdbot/ ? │──yes──▶ Apply to ~/.clawdbot/workspace/
│ ~/.moltbot/ ? │──yes──▶ Apply to ~/.moltbot/workspace/
│ ~/.moldbot/ ? │──yes──▶ Apply to ~/.moldbot/workspace/
│ --workspace path │──yes──▶ Apply to custom path
└────────────────────┘
~/<platform>/souls/<owner>/<name>/clawsouls restore# Explicit platform flag
clawsouls --platform zeroclaw use surgical-coder
# Custom workspace path
clawsouls --workspace ~/my-agent/workspace use surgical-coder
# Environment variable
CLAWSOULS_PLATFORM=clawdbot clawsouls use surgical-coder
# Check detection
clawsouls platform
# Install a soul (owner/name format)
npx clawsouls install clawsouls/surgical-coder
# Activate it (backs up your current workspace)
npx clawsouls use surgical-coder
# Restart your agent session — done!
# Use directly with npx (no install needed)
npx clawsouls <command>
# Or install globally
npm install -g clawsouls
Requirements: Node.js 22+
clawsouls platformShow detected agent platform(s) and workspace path.
clawsouls platform
# 🔍 Agent Platform Detection
#
# ▶ Active: OpenClaw 🦞
# Workspace: /home/user/.openclaw/workspace
# Souls dir: /home/user/.openclaw/souls
# Restart: openclaw gateway restart
clawsouls init [name] [--spec <version>]Scaffold a new soul package directory with template files.
clawsouls init my-soul
clawsouls init my-robot --spec 0.5
The --spec flag selects which Soul Spec version template to use:
| Flag | Version | Use Case |
|---|---|---|
| (default) | v0.4 | General-purpose personas |
--spec 0.3 | v0.3 | Minimal / legacy |
--spec 0.4 | v0.4 | General-purpose personas |
--spec 0.5 | v0.5 | Robotics / embodied agents (adds environment, interactionMode, sensor/actuator schemas) |
Creates a directory with soul.json, SOUL.md, IDENTITY.md, AGENTS.md, HEARTBEAT.md, and README.md — ready for customization and publishing.
clawsouls install <owner/name[@version]>Download and install a soul from the registry. Uses owner/name format (e.g., clawsouls/surgical-coder). Optionally specify a version with @version (e.g., clawsouls/surgical-coder@0.1.0). Without a version, installs the latest.
clawsouls install clawsouls/minimalist
clawsouls install clawsouls/devops-veteran
clawsouls install clawsouls/surgical-coder --force # overwrite existing
clawsouls install clawsouls/surgical-coder@0.1.0 # specific version
clawsouls use <name>Activate an installed soul. Your current workspace files are automatically backed up before switching.
clawsouls use minimalist
Automatic backup: Before applying a new soul, the current workspace files (SOUL.md, IDENTITY.md, AGENTS.md, HEARTBEAT.md) are saved to ~/<platform>/souls/_backup/<timestamp>/. You can always revert with clawsouls restore.
Protected files — these are never overwritten:
USER.md (your personal data)MEMORY.md (your AI's memories)TOOLS.md (your tool configuration)clawsouls restoreRevert to your previous soul from the latest backup.
clawsouls restore
clawsouls listList installed souls.
clawsouls list
clawsouls ls
clawsouls validate [dir]Validate a soul package against the Soul Spec.
clawsouls validate # validate current directory
clawsouls validate ./my-soul # validate specific directory
clawsouls validate --soulscan # include SoulScan security analysis
clawsouls soulscan [dir]Run SoulScan™ security and quality analysis on a soul package or active workspace.
clawsouls soulscan # scan active workspace
clawsouls soulscan ./my-soul # scan specific directory
clawsouls soulscan -q # quiet mode (for cron)
clawsouls soulscan --init # initialize baseline checksums
clawsouls publish <dir>Publish a soul package to the registry.
clawsouls login <token> # authenticate first
clawsouls publish ./my-soul # publish to clawsouls.ai
Souls follow the Soul Spec — an open specification for AI agent persona packages. A soul package contains:
my-soul/
├── soul.json # Metadata (name, version, tags, compatibility)
├── SOUL.md # Persona, tone, and boundaries
├── IDENTITY.md # Name, avatar, and vibe
├── AGENTS.md # Operating instructions
├── HEARTBEAT.md # Periodic check behavior
└── README.md # Human-readable description
All souls on clawsouls.ai are automatically scanned by SoulScan™ — our security engine that checks for prompt injection, data exfiltration, harmful content, and 50+ other patterns.
Apache-2.0
FAQs
CLI for ClawSouls — AI agent persona sharing platform
The npm package clawsouls receives a total of 86 weekly downloads. As such, clawsouls popularity was classified as not popular.
We found that clawsouls demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.