Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Smart Memory Keeper
v1.4.1解决 AI /new 后失忆问题的记忆管理 skill。三层加载机制(热/温/冷),session 启动时只取当前需要的记忆,省 token。包含:任务状态恢复、每日日记、项目索引、Dream 定期整理。纯文件系统,无需外部服务。用户说"先这样"、"暂停"、"记住这个"时触发。 Memory management...
⭐ 1· 62·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description promise a local, filesystem-based memory manager. The SKILL.md only uses the openclaw CLI and local files under ~/.openclaw/workspace/, and the declared required binary (openclaw) matches that need. No unrelated credentials or external services are requested.
Instruction Scope
Runtime instructions direct the agent to read the most recent OpenClaw session (openclaw sessions list --limit 1) plus local files (MEMORY.md, memory/*.md) to bootstrap tasks.md. The skill requires reading session content to synthesize memory, which is coherent with its purpose, but that means it will access past conversation history and any sensitive content stored in sessions — the SKILL.md says it will present findings and request confirmation before writing tasks.md, which mitigates risk but does not eliminate the privacy impact of the read.
Install Mechanism
Instruction-only skill with no install spec or remote downloads; no code files beyond SKILL.md and README. Low installation risk because nothing is automatically downloaded or executed by the installer.
Credentials
No environment variables, no credentials, and no external endpoints are requested. The lack of secrets is proportional to a purely local, filesystem-based memory skill.
Persistence & Privilege
SKILL.md and README instruct the user to append startup/load rules into global files (~/.openclaw/workspace/AGENTS.md and HEARTBEAT.md). Modifying these global agent startup configurations affects agent behavior beyond the skill itself. Although the docs emphasize the change is manual and the exact text to append is provided, this is effectively a permission to alter agent-wide startup behavior and should be reviewed (and backed up) before applying.
What to consider before installing
What to consider before installing:
- The skill is largely coherent: it is instruction-only and uses only the openclaw CLI and local files to implement a 3-tier memory system. There are no hidden downloads, no requested credentials, and no network endpoints.
- Primary concerns to weigh:
- It will read your most recent OpenClaw session(s) to build memory. That can expose any sensitive data contained in prior conversations. The SKILL.md says it will show you findings and ask for confirmation before writing tasks.md, but the read occurs up-front to generate that summary.
- The installation requires you to append lines to global startup files (~/.openclaw/workspace/AGENTS.md and HEARTBEAT.md). Those files control agent startup behavior for the whole workspace; adding entries changes agent behavior beyond this single skill. The skill provides the exact content to append, but you should manually inspect and understand each line before applying.
- Practical safety steps:
1. Back up ~/.openclaw/workspace/AGENTS.md and HEARTBEAT.md before making any changes so you can revert.
2. Manually copy the exact blocks from SKILL.md rather than running any automated 'install' that modifies global files without review.
3. Consider running the initial session scan only after sanitizing or removing particularly sensitive sessions, or run the one-time bootstrap manually and review the extracted summary carefully before approving writes.
4. Verify file permissions on ~/.openclaw/workspace/memory to ensure only your user can read/write those files.
5. If you prefer less blast radius, avoid appending to global AGENTS.md/HEARTBEAT.md and instead keep the memory rules in a local skill file and invoke the memory reads explicitly when needed.
- Final note: because the skill modifies agent startup behavior and reads session history (sensitive data), treat it with caution and perform manual review/backups before applying its post-install steps.Like a lobster shell, security has layers — review code before you run it.
latestvk97696dwxj4921q3w1js0r95yx846x5k
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binsopenclaw
