Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Memory Management

Manage and standardize trading decision records, extract lessons, and support history retrieval and comparison within the PAI trading system.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 205 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name and description (manage trading-memory, extract lessons, support retrieval/comparison) match the instructions' goals. However, the SKILL.md refers to helper scripts (memory_evaluator.py, auto_memory_manager.py) and a concrete home-directory path (/Users/zst/clawd/...) that are not supplied. A legitimate skill would either include those scripts or use generic locations; the tight coupling to an author's local paths is inconsistent with a reusable skill.
!
Instruction Scope
The instructions tell the agent to read, archive, and modify files under memory/ and an absolute path (/Users/zst/clawd/...), and to run named Python scripts. Because the skill is instruction-only and provides no code, an agent following these instructions may attempt to access arbitrary local files or fail unpredictably. The instructions also schedule periodic actions (daily/weekly maintenance) and mark files for archiving — these are file-write operations that modify user data and should be explicit and supplied with safe defaults.
Install Mechanism
There is no install spec and no code files, so nothing will be downloaded or installed by the skill itself. That lowers install-time risk, but also means required scripts are missing.
Credentials
The skill declares no required environment variables, credentials, or config paths. That is proportionate to the stated purpose. However, the SKILL.md references absolute user file paths which implicitly require filesystem access; that access is not declared or justified in metadata.
Persistence & Privilege
always is false and the skill is user-invocable only. It does not request permanent presence or system-wide config changes in its metadata. The instructions do describe periodic maintenance, but there is no mechanism in the package to register persistent services — the metadata does not request elevated persistence privileges.
What to consider before installing
This skill's purpose (trading-memory management) is plausible, but the SKILL.md expects two Python scripts (memory_evaluator.py and auto_memory_manager.py) and references an absolute home path (/Users/zst/clawd/...). Before installing or enabling this skill: 1) ask the author to provide the missing scripts or a clear, portable install plan; 2) ensure the skill uses relative or configurable paths rather than hard-coded absolute paths to avoid accidental access to your home directory; 3) review exactly which files it will read/write and whether you trust it to archive/delete files; 4) run it in a sandbox or on a test dataset first; and 5) decline or mark as untrusted if the author cannot explain or remove the hard-coded paths and supply the referenced tooling. Additional information that would change the assessment: included script files, an install spec that clearly installs vetted code, or removal of absolute user paths in favor of configurable locations.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk976nhaxkyy9zefxy2m1rxtjqd827kv9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

交易记忆管理技能

PAI 交易系统的记忆记录和管理技能 @version 1.0.0

🎯 目标

  • 标准化交易决策记录格式
  • 自动提炼经验教训
  • 支持历史决策检索和对比

📋 记忆类型

1. 交易日志 (Daily Trading Log)

位置:memory/trading/YYYY-MM-DD.md

内容:

  • 每次决策的时间戳
  • 决策内容 (BUY/SELL/HOLD)
  • 置信度和理由
  • 执行结果

2. 状态快照 (State Snapshot)

位置:memory/crypto_trading_state.json

内容:

  • 最后决策时间
  • 周期计数
  • 当日统计
  • 系统状态

3. 规则库 (Trading Rules)

位置:memory/trading_rules.md

内容:

  • R001-R006 规则详情
  • 规则触发条件
  • 历史验证结果

4. 错误清单 (Mistakes)

位置:memory/trading_mistakes.md

内容:

  • M001-M010 常见错误
  • 错误原因分析
  • 预防措施

🔧 工具

  • memory_evaluator.py - 记忆质量评估
  • auto_memory_manager.py - 自动记忆管理

📊 记忆维护协议

每日 (23:00)

  • 评估当日记忆质量
  • 提炼高价值记忆到 MEMORY.md
  • 标记待归档的低价值记忆

每周 (周六 23:00)

  • 归档旧记忆文件 (>30 天)
  • 清理重复/低质量记忆
  • 更新记忆系统统计

📁 相关文件

  • /Users/zst/clawd/MEMORY.md - 长期记忆
  • /Users/zst/clawd/memory/ - 日常记忆目录

Files

1 total
Select a file
Select a file to preview.

Comments

Loading comments…