Monica Memory Manager

PassAudited by ClawScan on May 10, 2026.

Overview

This looks like a purpose-aligned local memory manager, but it persistently stores conversation content and depends on a user-installed ChromaDB package for long-term memory.

This appears reasonable for a local memory-management skill. Before using it, decide what kinds of conversation content should be saved, set WORKSPACE_DIR so memories go to the right place, and install ChromaDB only from a trusted source if you need long-term vector search.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Information saved as memory may persist beyond the current conversation and influence later responses.

Why it was flagged

The skill explicitly creates long-term persistent memory for later retrieval, which is central to its purpose but means personal or sensitive conversation content may be reused in future context.

Skill content
长期 | `memory/vector-store/` | 语义检索 | 永久记忆,RAG
Recommendation

Only store content you are comfortable keeping as long-term memory, and review the local memory directory periodically.

What this means

Memories could be written somewhere unexpected if WORKSPACE_DIR is not set.

Why it was flagged

The script stores memory under WORKSPACE_DIR but otherwise falls back to a user-specific absolute path, so users should verify where persistent memory files will be written.

Skill content
WORKSPACE_DIR = Path(os.environ.get('WORKSPACE_DIR', '/Users/scott/.openclaw/workspace'))
Recommendation

Set WORKSPACE_DIR explicitly before use, or adjust the script/configuration so memory is stored in the intended project or OpenClaw workspace.

What this means

Installing the dependency manually may introduce version drift or package-source risk.

Why it was flagged

The long-term vector-store feature relies on ChromaDB, but the skill has no install spec or pinned dependency in the provided artifacts.

Skill content
print("✗ 需要安装 chromadb: pip install chromadb")
Recommendation

Install ChromaDB from a trusted package index, consider pinning a known-good version, and review dependency changes before enabling long-term memory.