大哥的记忆系统
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: memory-system Version: 1.0.0 The skill bundle implements a file-based memory system for an AI agent. The `SKILL.md` instructs the agent to execute a `bash` script (`scripts/memory-recovery.sh`) to read memory files. The script itself is benign, primarily using `cat` to display content from fixed-path `.md` files within the agent's workspace. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection designed to subvert the agent. The use of shell execution and file access is directly aligned with the stated purpose of a local memory system.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Information saved in these memory files may be shown to or relied on by the agent in later sessions, including sensitive, outdated, or inaccurate context.
The skill intentionally stores and reuses personal/work context across sessions, including identity, preferences, relationships, and decisions.
`identity.md` - 身份、偏好、关系 ... `key-decisions.md` - 关键决策、教训 ... 永久存储、高频检索 ... 不随session重启而改变
Keep the memory directory scoped and reviewable, avoid storing secrets or highly private details, periodically clean outdated entries, and instruct the agent to treat memory content as user notes rather than authoritative commands.
