Super Memori
v3.2.4Local-first hybrid memory skill for OpenClaw agents. Use when the agent needs to find, recall, search, or reuse past knowledge across episodic, semantic, pro...
⭐ 0· 85·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The files, scripts, and documented behavior align with the declared purpose of a local-first hybrid memory skill. Public interface is limited to four commands (query-memory.sh, memorize.sh, index-memory.sh, health-check.sh) which is consistent with the SKILL.md. There are auxiliary scripts (auto-learner.sh, embedding helpers, legacy scripts) that access local logs and files; these are coherent with a memory/learning feature but may surprise users if executed without review.
Instruction Scope
SKILL.md explicitly constrains runtime behavior to the four public commands and warns not to run helper scripts unless explicitly instructed. The runtime instructions and health-check contracts focus on local files, SQLite, and a local Qdrant endpoint. No instructions in SKILL.md require reading unrelated system secrets or contacting external services by default.
Install Mechanism
This is an instruction-and-script-only skill with no install spec. Nothing in the package fetches remote code during install. Dependencies (sentence-transformers, numpy) are optional at runtime; the code handles missing semantic dependencies by falling back to lexical behavior.
Credentials
No required environment variables or credentials are declared. The code honors optional configuration variables (OPENCLAW_WORKSPACE, SUPER_MEMORI_QDRANT_URL, SUPER_MEMORI_QDRANT_COLLECTION, SUPER_MEMORI_EMBED_MODEL). That is reasonable for a storage/search skill, but it means if a user configures SUPER_MEMORI_QDRANT_URL to point to a remote service it will send memory content/embeddings over the network — a configuration risk the user should monitor.
Persistence & Privilege
The skill does not request global 'always: true' privilege, does not modify other skills' configs, and confines writes to its workspace under ~/.openclaw (or OPENCLAW_WORKSPACE). It creates and updates local DB/index and queue files as expected for a memory system.
Assessment
This skill appears to do what it says: maintain local memory files, build a lexical SQLite index, optionally use Qdrant for semantic search, and expose a small CLI surface. Before installing or enabling automated runs, review these points:
- Confirm Qdrant stays local: by default the code uses http://127.0.0.1:6333, which is safe. If you (or an operator) set SUPER_MEMORI_QDRANT_URL to a remote host, the skill will send memory content/embeddings to that endpoint — treat that as sensitive data.
- Review auto-learner and cron suggestions: auxiliary scripts (auto-learner.sh, index-daily.sh) read ~/.openclaw logs and may be run by cron if you enable them. The SKILL.md instructs weak models to only use the four public commands; do not enable auxiliary scripts (or cron/PROMPT_COMMAND log capture) unless you understand and consent to the collection of command logs and automated ingest.
- File and directory access is expected: the skill reads/writes under the workspace (~/.openclaw/workspace by default) and writes index and queue files. Ensure file permissions and ownership are appropriate for your environment.
- Semantic dependencies are optional: if sentence-transformers or numpy are missing the skill will operate in lexical mode; installing those libraries enables local embeddings but also increases the host's resource use.
- If you plan to expose this to weaker/automated agents, enforce the SKILL.md public command contract and avoid giving the agent permission to run helper scripts that would read logs or push data to remote endpoints.
Overall: coherent and reasonable for its stated purpose, but review configuration (especially SUPER_MEMORI_QDRANT_URL and any automated cron/PROMPT_COMMAND changes) before enabling full automation.Like a lobster shell, security has layers — review code before you run it.
latestvk975qd8q7btv0zf64f4t4jhrm984d686
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
