Agent Memory System v4
v4.0.0生产级 Agent 记忆系统 — 6维坐标编码 + 语义检索 + 智能压缩
⭐ 0· 69·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (production Agent memory with encoding, semantic search, compression) match the included modules (encoder, store, recall, compressor, context_builder, cli, etc.). There are no unrelated required env vars or binaries listed, and the files implement the memory features the skill claims.
Instruction Scope
SKILL.md directs the agent to run the packaged CLI (python3 ~/.openclaw/workspace/agent-memory/cli.py) and describes storing a local SQLite DB and vector cache under ~/.openclaw/workspace/agent-memory/. Those actions are appropriate for a memory system, but the runtime instructions will cause the agent to read/write user data on disk (conversation history, indexes). The skill bundle actually includes many executable Python modules (not just prose), so installing/running it will execute code on the host — confirm you trust the code. Also compression features call an LLM function (llm_fn) — ensure how that function is provided and whether it sends data to external LLM endpoints.
Install Mechanism
No install spec is present (instruction-only in registry) which is low risk, but the package includes many code files that will be executed from workspace paths. No remote downloads or obscure install URLs were observed in the provided excerpts. Verify where these files are placed and that paths referenced in SKILL.md match where the platform will store skill files.
Credentials
The skill declares no required environment variables or credentials and the code shown doesn't require cloud keys. Optional dependencies (chromadb, sentence-transformers) are reasonable for semantic search. There are no unexpected credential-like env vars requested. Still review omitted files for hidden network calls or credential reads.
Persistence & Privilege
always:false (good). The skill is intended to persist conversation data locally (memory.db, chroma_db, daily_index). It also instructs the agent to automatically write memories during conversations — this is coherent with its purpose but means the agent will store potentially sensitive chat content on disk and could write/modify many local files. Confirm you want persistent local memory and consider encryption/access controls.
Scan Findings in Context
[pre-scan-injection-none] expected: No pre-scan injection signals were detected. This is consistent with a local memory system; however many files were truncated and not fully reviewed.
Assessment
What to consider before installing/activating:
- This package is a full local memory system: it will read/write a SQLite DB and vector cache under ~/.openclaw/workspace/agent-memory/ (or whatever path the platform uses). Expect persistent storage of conversation contents — review whether that is acceptable for your data sensitivity.
- The skill includes runnable Python modules (CLI + many libraries). Although I saw no network endpoints or unexpected credential requests in the reviewed files, 23 files were omitted from the transcript; review all included files (especially obsidian_sync, any modules that might call external APIs or open sockets) before trusting it.
- Compression uses an LLM call (llm_fn). Verify how the agent provides that function and whether using it will send memory text to an external LLM provider — if so, you may be leaking private content to that provider.
- Optional dependencies like chromadb / sentence-transformers may download models or start background services; audit dependency behavior and disk/network effects.
- Recommended steps: run the code in a sandboxed environment first, inspect obsidian_sync and any network/HTTP calls, check where files will be created, consider enabling encryption or restricting filesystem permissions for the memory directory, and decide whether to allow autonomous writes (agent invoking the CLI during conversation).
Confidence note: I reviewed many core modules included in the manifest and SKILL.md, and found them coherent with the declared purpose. Because several files were truncated/omitted in the provided bundle, my confidence is medium; a full-line-by-line review of the remaining files would raise confidence to high.Like a lobster shell, security has layers — review code before you run it.
agentvk974bnen0waw5pss39a3vhpewd84n1f2aivk974bnen0waw5pss39a3vhpewd84n1f2latestvk974bnen0waw5pss39a3vhpewd84n1f2memoryvk974bnen0waw5pss39a3vhpewd84n1f2ragvk974bnen0waw5pss39a3vhpewd84n1f2sqlitevk974bnen0waw5pss39a3vhpewd84n1f2vectorvk974bnen0waw5pss39a3vhpewd84n1f2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
