Shared Brain
v1.0.2Shared persistent memory layer across multiple AI agents. Use when setting up a multi-agent workspace for the first time, when an agent discovers a permanent...
⭐ 0· 80·0 current·0 all-time
byOmar Hernandez@ohernandez-dev-blossom
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (shared persistent memory) match the code and instructions: scripts create a queue and canonical brain file, integrate with HEARTBEAT.md, patch AGENTS.md to read the brain, and provide write/curate scripts. No unrelated credentials, binaries, or network access are requested.
Instruction Scope
The SKILL.md and sb-install.sh instruct the skill to patch every agents/*/AGENTS.md and to append a curation step to HEARTBEAT.md, and sb-install.sh will copy scripts into the workspace. This is expected for integration but is invasive (edits multiple repo files). The scripts only touch workspace paths (defaults under ~/clawd) and do not read unrelated system files or secrets. Consider that the install modifies many files automatically — review with --dry-run and back up AGENTS.md/HEARTBEAT.md beforehand.
Install Mechanism
Instruction-only skill with included shell/python scripts; no network downloads or package installs. Scripts are copied into the workspace by sb-install.sh. There is no external URL or arbitrary-code download.
Credentials
No required environment variables or credentials. The scripts respect optional SB_* variables declared in SKILL.md (SB_WORKSPACE, SB_AGENT, SB_BRAIN, SB_QUEUE, SB_ARCHIVE_DIR). Requested env vars are appropriate for customizing workspace paths.
Persistence & Privilege
The skill is not always-enabled and does not request platform-wide privileges, but it does persist scripts and files inside the user workspace and mutates AGENTS.md and HEARTBEAT.md. This level of persistence is consistent with the stated integration purpose but is still a material change to the workspace and should be applied with review/backups.
Assessment
What to consider before installing:
- This skill will modify your workspace: it creates memory files under ~/clawd/memory (by default), copies scripts to ~/clawd/skills/shared-brain/scripts/, and patches every agents/*/AGENTS.md and your HEARTBEAT.md. Always run sb-install.sh --dry-run first and back up AGENTS.md and HEARTBEAT.md before applying.
- No network access or secrets are required by the scripts, which lowers exfiltration risk. Still, review the included scripts yourself (sb-install.sh, sb-curate.sh, sb-write.sh) so you understand the exact edits performed.
- Concurrency and input validation notes: sb-write.sh appends lines to the queue without a formal lock; concurrent writers could theoretically interleave writes or produce malformed lines (this is an operational risk rather than an exfiltration risk). sb-curate.sh uses grep/regexes that treat keys as regex patterns — specially crafted keys containing regex metacharacters could cause unexpected matches or conflict behavior. Consider restricting who can run sb-write.sh or validating keys centrally.
- Compatibility: sb-write.sh and sb-curate.sh use grep -P in one validation check; some systems (BSD/macOS default grep) do not support -P. Test in your environment before trusting automatic installs.
- Operational security: only allow trusted agents/people to write facts to the queue; facts are promoted by heartbeat into a file read by all agents (poisoning the queue can propagate bad ground truth). Use file permissions and team processes to control who runs sb-write.sh.
- If you want extra caution, install in a sandboxed workspace first to observe behavior, and keep backups of any critical AGENTS.md, HEARTBEAT.md, and existing memory files.Like a lobster shell, security has layers — review code before you run it.
latestvk9731scz8r8v41a4y0ndr1jf4n83ds12
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
