每日记忆管家

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is not shown exfiltrating data, but it is designed to automatically read recent sessions and save long-term memory notes without per-entry user approval.

Review this skill carefully before installing. It appears purpose-aligned and no exfiltration endpoint is shown, but it is meant to save summaries of recent sessions into long-term local memory. Use manual mode or add safeguards if you discuss sensitive information, and regularly inspect ~/.openclaw/workspace/memory.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Private conversation details, mistakes, or prompt-injected content from recent sessions could become long-lived memory that influences future work.

Why it was flagged

The skill intentionally turns recent conversation content into persistent memory. Because this happens automatically and no retention, sensitive-data exclusion, or review-before-save controls are described, private or misleading session content could be stored and reused later.

Skill content
Automatically extract session content and update daily memory files to maintain long-term memory continuity.
Recommendation

Use this only if you want automatic memory capture. Prefer manual triggering or add clear allowlists, sensitive-data exclusions, retention limits, and a habit of reviewing/deleting the daily memory files.

What this means

If the user configures the cron mode, the skill may keep updating memory files on a schedule even when the user is not actively asking it to record something.

Why it was flagged

The scheduled mode would let the memory process run periodically outside a specific user request. The artifacts do not show that cron is installed automatically, but the intended background operation is still important for users to notice.

Skill content
Passive mode: Cron job runs hourly (automatic)
Recommendation

Only configure the cron job deliberately, document how to remove it, and consider using manual mode if automatic background memory capture is not desired.