Agent Dream
v1.0.6Nightly memory consolidation and self-reflection for OpenClaw agents. Your agent dreams — reviewing sessions, organizing memories, pruning stale info, and re...
⭐ 5· 332·3 current·3 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (memory consolidation, reflection) align with what the skill does: scanning workspace memory files, sessions, and identity files, backing up and updating MEMORY.md and topic files. It does not request unrelated credentials or external services.
Instruction Scope
The SKILL.md explicitly instructs reading session transcripts (.jsonl), MEMORY.md, SOUL.md, topic files under memory/, and writing backups and changes to MEMORY.md and topic files. That is coherent with the stated goal, but it means the agent will permanently persist anything promoted to MEMORY.md (including potentially sensitive statements). The instructions keep a safe two-pass deletion flow, change gates (>30% flagged, >50% blocked), and a first-run consent prompt for rewriting MEMORY.md, which are appropriate safeguards.
Install Mechanism
No install spec; only an included setup script (no downloads or external packages). Setup.js is local filesystem-only and writes a JSON config into the skill's assets directory. No remote fetches or archive extraction are present.
Credentials
The skill requires no environment variables, no credentials, and no special config paths beyond workspace files (MEMORY.md, SOUL.md, memory/, .openclaw/agents/.../sessions). Those file accesses are proportionate to a memory-consolidation skill.
Persistence & Privilege
always is false and the skill is user-invocable. It writes its own config to its assets directory and modifies workspace memory files only with user consent flow and backups. It does not request system-wide changes or other skills' credentials.
Scan Findings in Context
[no-findings] expected: Static scan reported no pre-scan injection signals; this is expected for an instruction-first skill with a small, local setup script.
Assessment
This skill will read your agent's session transcripts and local memory files and will write backups and (optionally) update MEMORY.md and topic files. Before installing: 1) Review the workspace the script will point to (run setup.js manually from a safe copy) and inspect the generated assets/dream-config.json to confirm paths; 2) Start with "No" for allowing MEMORY.md rewrite until you see sample dream output; 3) Limit the skill's file permissions to the intended workspace and do not run it on a repo containing secrets you don't want persisted; 4) If you run multiple agents from a shared parent directory, note setup.js walks parent dirs to find .openclaw/agents and could detect session files for other agents—confirm it detected the intended agent; 5) Because this skill promotes user statements into persistent memory, avoid auto-promoting anything containing credentials or highly sensitive info. Overall the behavior is coherent with its purpose and includes reasonable safety rails, but exercise usual caution with what gets made long-lived in MEMORY.md.Like a lobster shell, security has layers — review code before you run it.
agentvk970wjaaa9ycgppcnd27rp0qch8445dnconsolidationvk970wjaaa9ycgppcnd27rp0qch8445dndreamvk970wjaaa9ycgppcnd27rp0qch8445dnidentityvk970wjaaa9ycgppcnd27rp0qch8445dnlatestvk970wjaaa9ycgppcnd27rp0qch8445dnlong-termvk970wjaaa9ycgppcnd27rp0qch8445dnmemoryvk970wjaaa9ycgppcnd27rp0qch8445dnopenclawvk970wjaaa9ycgppcnd27rp0qch8445dnpersistencevk970wjaaa9ycgppcnd27rp0qch8445dnself-reflectionvk970wjaaa9ycgppcnd27rp0qch8445dn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.