Three Tier Memory

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a purpose-aligned local memory manager, but it intentionally stores and reuses conversation memories, so users should treat the stored data as persistent.

Install this only if you want the agent to keep local long-term memories. Set the workspace path deliberately, avoid adding passwords or highly sensitive information, review the memory files/vector store periodically, and pin any manually installed dependencies such as ChromaDB.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Personal details, preferences, or inaccurate memories could persist locally and influence future conversations.

Why it was flagged

The skill intentionally persists long-term memory and retrieves it for future context, which is purpose-aligned but creates lasting, reusable agent memory.

Skill content
长期 | `memory/vector-store/` | 语义检索 | 永久记忆,RAG ... 每次查询前先检索相关记忆
Recommendation

Use this only if you want persistent memory. Avoid storing secrets, periodically review or delete the memory directory, and treat retrieved memories as context to verify rather than authoritative instructions.

What this means

Users may need to manually install ChromaDB, and unpinned manual installs provide less supply-chain assurance.

Why it was flagged

The script relies on an optional external Python package for long-term vector storage, but the registry shows no install spec or pinned dependency.

Skill content
print("✗ 需要安装 chromadb: pip install chromadb")
Recommendation

Install dependencies from trusted sources, consider pinning package versions, and review the complete script before using long-term vector memory.