大哥的记忆系统

• Risk level: Low
• Analyzed: May 1, 2026, 5:34 AM
• Findings: 1
• Version: 1.0.0

Overview

This is a local memory-recovery skill with no evident networking, credentials, or destructive behavior, but its persistent memory files can contain sensitive context that will influence future sessions.

Install only if you want a local persistent memory system. Before use, review what is stored under the memory directory, avoid secrets and overly private details, and periodically edit or delete entries that should not influence future agent sessions.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI06: Memory and Context Poisoning

Note

What this means

Information saved in these memory files may be shown to or relied on by the agent in later sessions, including sensitive, outdated, or inaccurate context.

Why it was flagged

The skill intentionally stores and reuses personal/work context across sessions, including identity, preferences, relationships, and decisions.

Skill content

`identity.md` - 身份、偏好、关系 ... `key-decisions.md` - 关键决策、教训 ... 永久存储、高频检索 ... 不随session重启而改变

Recommendation

Keep the memory directory scoped and reviewable, avoid storing secrets or highly private details, periodically clean outdated entries, and instruct the agent to treat memory content as user notes rather than authoritative commands.