LiQun Context Manager

AdvisoryAudited by VirusTotal on Apr 22, 2026.

Overview

Type: OpenClaw Skill Name: liqun-context-manager Version: 1.0.0 The context-manager skill bundle is a straightforward utility for searching and retrieving local markdown and JSON files within designated 'memory' and 'skills' directories. The code in context_manager.py performs basic file I/O and string matching without any network activity, system-level execution, or attempts to access sensitive data outside its defined scope.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If memory or skill files contain private, stale, or untrusted text, those files may be surfaced as relevant context for future work.

Why it was flagged

The helper reads local Markdown/JSON memory and skill files to find keyword matches. This is aligned with a context manager, but it means persistent local context can influence what the agent later retrieves or relies on.

Skill content
SEARCH_DIRS = ['memory', 'skills'] ... with open(path, 'r', encoding='utf-8') as f: content = f.read() ... if keyword.lower() in content.lower(): results.append(path)
Recommendation

Use this only with intended memory directories, review returned files before relying on them, and avoid placing sensitive or untrusted content in memory/ or skills/ if it should not be searched.