memory-compression-system

ReviewAudited by ClawScan on May 10, 2026.

Overview

This skill is broadly consistent with its stated purpose, but enabling it creates recurring background compression of OpenClaw memory files.

This appears purpose-aligned for memory compression, but install or enable it only if you are comfortable with recurring background jobs that read and copy OpenClaw memory. Review retention settings, keep the config file trusted, and confirm any referenced helper scripts are actually present before using those features.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If enabled, the skill will continue running scheduled memory compression without a fresh user request each time.

Why it was flagged

Enabling the skill schedules a recurring OpenClaw agent turn every 6 hours. This matches the advertised automatic compression feature, but it is persistent background automation.

Skill content
"everyMs": 21600000 ... "payload": { "kind": "agentTurn", "message": "Run Memory Compression System auto compression: cd /home/node/.openclaw/workspace/skills/memory-compression-system && ./scripts/compress.sh --auto" }
Recommendation

Only run enable.sh if you want recurring automation, and use scripts/disable.sh or OpenClaw cron management to remove the schedule when no longer needed.

What this means

Private information stored in OpenClaw memory may be copied into backup or compressed files under this skill's data directories.

Why it was flagged

The compression process reads OpenClaw memory files and creates backups of the memory directory, producing retained copies of potentially sensitive agent/user context.

Skill content
tar -czf "$backup_file" -C "/home/node/.openclaw/workspace" memory/ ... for file in /home/node/.openclaw/workspace/memory/*.md
Recommendation

Review what is stored in OpenClaw memory before enabling compression, and adjust retention/cleanup settings if the memory may contain sensitive data.

What this means

If the config file is edited maliciously or accidentally contains shell commands, those commands could run when the compression script runs.

Why it was flagged

The script sources its configuration file as shell code. This is common in shell tooling, but it means a modified config file could execute commands during manual or scheduled runs.

Skill content
[ -f "$CONFIG_FILE" ] && source "$CONFIG_FILE" 2>/dev/null
Recommendation

Keep config/default.conf trusted and limited to simple variable assignments; avoid letting untrusted agents or scripts edit it.

What this means

Some documented commands may not work or may depend on code not present in this review set.

Why it was flagged

The documentation references helper scripts that are not included in the supplied file manifest, so some advertised behavior cannot be reviewed from the provided artifacts.

Skill content
scripts/search.sh "keyword" ... scripts/decompress.sh [filename] ... scripts/logs.sh
Recommendation

Before relying on search, decompression, logs, backup, or restore commands, verify the corresponding scripts are present and review them.