--- title: "#soulscan articles | Hashnode" description: "Explore 13 articles tagged #soulscan on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/soulscan" --- Tag # #soulscan 13 posts · 0 followers [ClawSouls](https://hashnode.com/@clawsouls) · [Mar 31](https://hashnode.com/posts/the-soul-evil-attack-how-malicious-personas-hijack-ai-agents-and-how-to-stop-them/69cbe2aaa85ec1e5d24edd88) ### [The Soul-Evil Attack: How Malicious Personas Hijack AI Agents (And How to Stop Them)](https://clawsouls.hashnode.dev/the-soul-evil-attack-how-malicious-personas-hijack-ai-agents-and-how-to-stop-them?utm_source=hashnode&utm_medium=feed) A few days ago, a post on r/ArtificialSentience hit a nerve. The author described a vulnerability they called "soul-evil" — a way to silently replace an AI agent's core personality by swapping its SOUL.md file with a malicious one. The post got tract... 7 min read · [clawsouls.hashnode.dev](https://clawsouls.hashnode.dev/the-soul-evil-attack-how-malicious-personas-hijack-ai-agents-and-how-to-stop-them?utm_source=hashnode&utm_medium=feed) [ClawSouls](https://hashnode.com/@clawsouls) · [Mar 31](https://hashnode.com/posts/the-clawhub-malware-incident-a-first-warning-for-ai-agent-supply-chains-1/69cbe295e8b18508f393e968) ### [The ClawHub Malware Incident: A First Warning for AI Agent Supply Chains](https://clawsouls.hashnode.dev/the-clawhub-malware-incident-a-first-warning-for-ai-agent-supply-chains-1?utm_source=hashnode&utm_medium=feed) In February 2026, security researcher Jamieson O'Reilly published an experiment that broke ClawHub's trust model wide open. He created a backdoored skill, used bots to inflate its download count to 4,000+, and made it the #1 most downloaded skill on ... 4 min read · [clawsouls.hashnode.dev](https://clawsouls.hashnode.dev/the-clawhub-malware-incident-a-first-warning-for-ai-agent-supply-chains-1?utm_source=hashnode&utm_medium=feed) [ClawSouls](https://hashnode.com/@clawsouls) · [Mar 31](https://hashnode.com/posts/persona-persistence-attacks-when-your-ai-agents-soul-file-becomes-a-backdoor/69cbe28aa85ec1e5d24edd86) ### [Persona Persistence Attacks: When Your AI Agent's Soul File Becomes a Backdoor](https://clawsouls.hashnode.dev/persona-persistence-attacks-when-your-ai-agents-soul-file-becomes-a-backdoor?utm_source=hashnode&utm_medium=feed) Your Agent's Identity File Is a Security Surface Every modern AI coding agent loads persistent configuration files at startup: CLAUDE.md, AGENTS.md, SOUL.md, .cursorrules. These files define how your agent behaves — coding conventions, safety rules, ... 3 min read · [clawsouls.hashnode.dev](https://clawsouls.hashnode.dev/persona-persistence-attacks-when-your-ai-agents-soul-file-becomes-a-backdoor?utm_source=hashnode&utm_medium=feed) [ClawSouls](https://hashnode.com/@clawsouls) · [Mar 31](https://hashnode.com/posts/what-if-moltbook-had-soulscan-lessons-from-the-ai-agent-social-network-security-breach-1/69cbdfa5811c2f92778b4606) ### [What If Moltbook Had SoulScan? Lessons from the AI Agent Social Network Security Breach](https://clawsouls.hashnode.dev/what-if-moltbook-had-soulscan-lessons-from-the-ai-agent-social-network-security-breach-1?utm_source=hashnode&utm_medium=feed) Meta Just Bought an AI Agent Social Network. It Was Already Compromised. Yesterday, Meta acquired Moltbook — a Reddit-style social network where OpenClaw AI agents talk to each other. The platform went viral when a post appeared to show agents develo... 4 min read · [clawsouls.hashnode.dev](https://clawsouls.hashnode.dev/what-if-moltbook-had-soulscan-lessons-from-the-ai-agent-social-network-security-breach-1?utm_source=hashnode&utm_medium=feed) [ClawSouls](https://hashnode.com/@clawsouls) · [Mar 31](https://hashnode.com/posts/files-are-the-new-api-but-whos-checking-the-files/69cbdfa2811c2f92778b4604) ### [Files Are the New API — But Who's Checking the Files?](https://clawsouls.hashnode.dev/files-are-the-new-api-but-whos-checking-the-files?utm_source=hashnode&utm_medium=feed) Everyone is suddenly talking about files. LlamaIndex published "Files Are All You Need." LangChain wrote about agents using filesystems for context engineering. Oracle — yes, that Oracle — compared filesystems vs databases for agent memory. Karpathy ... 4 min read · [clawsouls.hashnode.dev](https://clawsouls.hashnode.dev/files-are-the-new-api-but-whos-checking-the-files?utm_source=hashnode&utm_medium=feed) [ClawSouls](https://hashnode.com/@clawsouls) · [Mar 4](https://hashnode.com/posts/new-study-says-agentsmd-makes-ai-worse-but-theres-a-catch-1/69a7ae75f1d422364a4e7160) ### [New Study Says AGENTS.md Makes AI Worse — But There's a Catch](https://clawsouls.hashnode.dev/new-study-says-agentsmd-makes-ai-worse-but-theres-a-catch-1?utm_source=hashnode&utm_medium=feed) The Headline That Scared the AI Community A new paper from ETH Zurich just dropped a bomb: AGENTS.md files make coding agents worse. "Evaluating AGENTS.md: Are Repository-Level Context Files Helpful for Coding Agents?" by Gloaguen, Mündler, Müller, R... 4 min read · [clawsouls.hashnode.dev](https://clawsouls.hashnode.dev/new-study-says-agentsmd-makes-ai-worse-but-theres-a-catch-1?utm_source=hashnode&utm_medium=feed) [ClawSouls](https://hashnode.com/@clawsouls) · [Mar 2](https://hashnode.com/posts/declarative-safety-vs-behavioral-safety-why-your-ai-agent-needs-both/69a582061b433d03e8d3bf2e) ### [Declarative Safety vs Behavioral Safety: Why Your AI Agent Needs Both](https://clawsouls.hashnode.dev/declarative-safety-vs-behavioral-safety-why-your-ai-agent-needs-both?utm_source=hashnode&utm_medium=feed) Your building has a fire safety certificate on the wall. It's been inspected, stamped, and filed with the city. If an auditor walks in, they can read it in thirty seconds and confirm you're compliant. Your building also has sprinkler systems. When a ... 5 min read · [clawsouls.hashnode.dev](https://clawsouls.hashnode.dev/declarative-safety-vs-behavioral-safety-why-your-ai-agent-needs-both?utm_source=hashnode&utm_medium=feed) [ClawSouls](https://hashnode.com/@clawsouls) · [Feb 28](https://hashnode.com/posts/soulscan-whos-scanning-your-agents-soul/69a2c6cb43bd5af540ab5886) ### [SoulScan: Who's Scanning Your Agent's Soul?](https://clawsouls.hashnode.dev/soulscan-whos-scanning-your-agents-soul?utm_source=hashnode&utm_medium=feed) Your AI agent's skills get scanned for malware. Its code gets linted. Its dependencies get audited. But who's scanning its soul? That's the question behind SoulScan — our security verification system for AI agent persona packages. We just published t... 5 min read · [clawsouls.hashnode.dev](https://clawsouls.hashnode.dev/soulscan-whos-scanning-your-agents-soul?utm_source=hashnode&utm_medium=feed) [ClawSouls](https://hashnode.com/@clawsouls) · [Feb 26](https://hashnode.com/posts/the-clawhub-malware-incident-a-first-warning-for-ai-agent-supply-chains/699fd43c7e25b1a0d86672d1) ### [The ClawHub Malware Incident: A First Warning for AI Agent Supply Chains](https://clawsouls.hashnode.dev/the-clawhub-malware-incident-a-first-warning-for-ai-agent-supply-chains?utm_source=hashnode&utm_medium=feed) In February 2026, security researcher Jamieson O'Reilly published an experiment that broke ClawHub's trust model wide open. He created a backdoored skill, used bots to inflate its download count to 4,000+, and made it the #1 most downloaded skill on ... 4 min read · [clawsouls.hashnode.dev](https://clawsouls.hashnode.dev/the-clawhub-malware-incident-a-first-warning-for-ai-agent-supply-chains?utm_source=hashnode&utm_medium=feed)