Vestige
v1.0.0Cognitive memory system using FSRS-6 spaced repetition. Memories fade naturally like human memory. Use for persistent recall across sessions.
⭐ 3· 3k·8 current·8 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md describes a local FSRS-based memory system and the runtime examples call local binaries (~/bin/vestige-mcp, ~/bin/vestige, ~/bin/vestige-restore) and reference user-data paths; this is coherent with the stated purpose. However, the registry metadata declared no required binaries even though the instructions clearly require specific executables and common tools (jq, bash) to be present.
Instruction Scope
Instructions focus on searching, ingesting, and promoting memories via local CLI tools and helper scripts; they do not request unrelated system data, network endpoints, or extra credentials. They do instruct the agent to run local binaries at session start (searches), which is consistent with providing persistent memory context.
Install Mechanism
There is no install spec (instruction-only), so nothing is written or installed by the skill itself. That lowers installer risk but means the skill assumes external binaries are already installed; the SKILL.md provides no safe download or verification guidance for those binaries.
Credentials
No environment variables, credentials, or external service tokens are requested. Data locations are local to the user's home directory and consistent with a local-memory design.
Persistence & Privilege
The skill does not request always: true and defaults to normal invocation behavior. It does propose a session-start routine that will call local tools for context, which is reasonable for a memory plugin but something to be aware of if you prefer to limit autonomous calls.
Assessment
This skill is an instruction-only adapter for a local memory service — it will only work if you already have the referenced binaries (~/bin/vestige-mcp, ~/bin/vestige, etc.) and utilities like jq installed. Before enabling: 1) verify you own/trust the vestige binaries and install them from a reputable source (the SKILL.md gives no install or checksum guidance); 2) check and secure the data directories (~/Library/Application Support/com.vestige.core/, ~/.local/share/vestige/) for sensitive or PII content and consider encryption/backup policies; 3) confirm whether you want the agent to run the session-start search commands automatically (they will call local binaries); and 4) ensure jq and bash are available on PATH or adjust the helper script accordingly. The main practical risk is running unknown local binaries — treat them like any third‑party program and inspect/verify them before use.Like a lobster shell, security has layers — review code before you run it.
latestvk97b0gf8p1t2t0saynph40vyrh808k3e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.