smart-memory-lite (Automaton)
v1.0.1Lightweight cognitive memory system for AI agents by Automaton. Auto-save conversations, quick recall, session management.
⭐ 0· 86·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (lightweight memory, auto-save, recall) match the provided code and SKILL.md. The code implements file-based JSON storage, recall/search, export/import, and session summaries — all consistent with the stated purpose. Minor mismatch: SKILL.md lists version 1.0.0 while registry metadata/version is 1.0.1, but this is likely bookkeeping.
Instruction Scope
SKILL.md instructs use of the SmartMemory API and shows examples that align with index.js behavior (save, recall, export/import). The instructions do not ask the agent to read unrelated system files, environment variables, or post data to external endpoints.
Install Mechanism
There is no install spec in the registry (instruction-only), but the package includes index.js and package.json. Nothing is downloaded from external URLs and there are no install-time scripts; risk from installation is low.
Credentials
The skill requires no environment variables, credentials, or external services. The API and code operate on local filesystem paths provided by the user (storagePath).
Persistence & Privilege
The skill writes and reads local files (default './memories' and a per-user subdirectory). It does not request elevated privileges or modify other skills, but users should be aware that conversations are auto-saved to disk by default (autoSave true) and files are human-readable JSON.
Assessment
This skill appears to do what it says: a simple, local JSON-based memory store with no network calls or secret access. Decide before installing whether you want conversations auto-saved to disk: set storagePath to a secure location you control (not a system or home directory you don't want written to), disable autoSave if you prefer manual control, and restrict filesystem permissions on the memories directory. If you store sensitive PII in conversations, consider encrypting backups or avoiding export. Finally, although the code is small and readable, only install/run it in environments you trust (or review/run in a sandbox) and confirm the package origin if you require higher assurance.Like a lobster shell, security has layers — review code before you run it.
latestvk97cc8tka59hacnk9q34bv2et983baxf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis