Security audit
Security checks for vulnerabilities and agentic risk
This skill is a local vector-memory system, but it stores and reuses user-derived data persistently with weak privacy controls and some unsupported safety claims.
Install only if you want a durable local memory system. Treat captured memories and vectors as sensitive, avoid enabling autoCapture or cron until reviewed, verify what service owns localhost:11434, do not store secrets, and require manual review before anything is written to SOUL.md or reused as future agent guidance.
def get_embedding(text):
"""获取 BGE 向量"""
try:
response = requests.post(
'http://localhost:11434/api/embeddings',
json={
'prompt': text # BGE 服务使用 prompt 字段def get_embedding(text):
"""获取 BGE 向量"""
try:
response = requests.post(
'http://localhost:11434/api/embeddings',
json={
'prompt': text # BGE 服务使用 prompt 字段```bash
# 1. 创建目录结构
mkdir -p ~/.openclaw/workspace/memory/{errors,corrections,practices,events,gaps}
mkdir -p ~/.openclaw/workspace/memory_archive
mkdir -p ~/.openclaw/workspace/vector_db/memoriesNo suspicious patterns detected.