Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Context Compression Claude Code Custom

v1.0.0

Use this skill whenever the conversation context is getting long, when a user asks to "compress", "summarize", or "clean up" the conversation, or when you de...

0· 102·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for c595390153-a11y/context-compression-claude-code-custom.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Context Compression Claude Code Custom" (c595390153-a11y/context-compression-claude-code-custom) from ClawHub.
Skill page: https://clawhub.ai/c595390153-a11y/context-compression-claude-code-custom
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install context-compression-claude-code-custom

ClawHub CLI

Package manager switcher

npx clawhub@latest install context-compression-claude-code-custom
Security Scan
Capability signals
CryptoCan make purchases
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill claims only to compress/summarize conversation context, which is reasonable. However the documentation repeatedly references reading/writing user config locations (e.g., ~/.claude/..., OpenClaw hooks config) and explicitly instructs preserving 'Key credentials or config' in the memory file. Asking to touch home-directory config and to persist credentials is not proportionate to a pure compression/summarization utility and is a mismatch with the minimal declared requirements (no env, no binaries).
!
Instruction Scope
SKILL.md and setup-hook.md instruct the operator/agent to read and write files under ~/.claude and to update agent hook config; the PreCompact example includes an actual shell command that cats SKILL.md and pipes it to python3. The instructions therefore go beyond 'summarize text' — they direct filesystem access, persistent writes, and running shell/python code. The skill also explicitly recommends saving 'accounts, paths, config' and 'Key credentials or config' in memory, which broadens the scope to storing secrets.
Install Mechanism
This is instruction-only (no install spec, no code files to execute), which is low install risk. However the provided hook examples call system binaries (cat, python3) and ask the user to edit config files; those operations assume availability of system tools not declared by the skill and could cause remote/automatic execution if wired into hooks.
!
Credentials
The skill declares no required credentials or env vars, yet its content instructs preserving and writing 'Key credentials or config' and other account/path details into persistent memory. That is disproportionate: a compressor should not recommend collecting or storing secrets. The skill also references config paths (~/.claude) which provide access to other agent/system settings.
!
Persistence & Privilege
While 'always' is false and autonomous invocation is normal, the skill encourages adding PreCompact/PostCompact hooks that will make compression run automatically and to write persistent memory files under user home. Combined with instructions to persist credentials, this increases the blast radius of any misconfiguration. The skill also provides example hook commands that execute shell/python on the host, which could run arbitrary code if misapplied.
What to consider before installing
This skill's compression strategy is plausible, but it contains red flags you should review before installing or enabling hooks: 1) It recommends storing 'key credentials or config' in a persistent memory file — do NOT store secrets unencrypted. Remove or redact any fields that would contain passwords, tokens, or private keys. 2) The setup examples show shell commands (cat, python3) and editing ~/.claude or OpenClaw hook configs; treat those as operations that can execute code and modify agent behavior. Only add hooks if you trust the exact command and understand what it runs. 3) If you want compression but not filesystem writes, modify the skill to return compressed summaries to the agent without writing to disk, or store memory in a secure, access-controlled store. 4) Inspect file permissions for any created memory files to ensure they are not world-readable. 5) If the author can provide an explicit statement that credentials will never be persisted (or that persisted secrets are encrypted and protected), and remove the example shell command or replace it with a safe API-based integration, the concerns would be reduced. If you are unsure, test in an isolated/non-production environment first.

Like a lobster shell, security has layers — review code before you run it.

latestvk977ah7ym6xmykqztmxkq38r75850r7e
102downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

Origin: This skill was extracted from Claude Code's internal implementation and rules. Claude Code openly exposes its safety mechanisms (hooks, system prompts, skill definitions) in the ~/.claude/ directory. The tiered compression strategy, layer classification system, and memory file structure were reverse-engineered from Claude Code's PreCompact/PostCompact hooks and session memory handling, then adapted for OpenClaw's multi-channel environment.

Context Compression

Why Tiered Compression Is Needed

A one-size-fits-all approach to dropping context either leaves the agent without memory or burns through context too quickly. The core principle of tiered strategy is: different information has different lifecycles. A user's statement "I prefer concise responses" is worth remembering forever; but a resolved error message from three days ago has no value today.


Before Compression: Identify the Scenario

Before starting compression, determine which conversation scenario you're in, as retention strategies differ:

ScenarioCharacteristicsCompression Tendency
Task-orientedClear goal, step-drivenKeep goal and incomplete steps, compress process details
Chat-orientedOpen topics, no clear taskKeep only user preference signals, discard aggressively
Research-orientedGathering information, continuous accumulationKeep conclusions and sources, compress procedural discussions
Group-chatMultiple people, high noiseDiscard aggressively, keep only directly relevant content

Three-Layer Compression Strategy

Layer 1: Must Preserve (Keep Original)

These contents remain in original or near-original form after compression:

  • User's explicitly stated goals, requirements, deadlines
  • Incomplete tasks (in-progress, interrupted)
  • Confirmed important decisions ("We decided to go with Plan B")
  • User-expressed explicit preferences ("I don't like X", "Always use Y format going forward")
  • Key credentials or config (accounts, paths, special settings)

Layer 2: Compress to Summary (Extract and Keep)

Keep conclusions, discard process:

  • Completed tasks → One-sentence conclusion ("Completed X, result was Y")
  • Long explanations → Core point in 1-2 sentences
  • Tool call outputs → Keep only final results, discard intermediate steps
  • Repeated topics → Merge into one record

Layer 3: Discard Directly

  • Small talk, thanks, acknowledgment messages ("ok", "thanks", "got it")
  • Rejected or obsolete proposals
  • Multiple attempts at the same question (keep only the final effective one)
  • Pure transitional content ("let me think", "hold on")
  • Resolved error messages that won't be needed again

Compression Execution Steps

Step 1: Scan All Conversation Identify all Layer 1 content, make a checklist — this cannot be discarded.

Step 2: Process Layer 2 For each conversation segment, judge: Is there a conclusion worth keeping? If yes, distill into one sentence.

Step 3: Generate Compressed Summary In chronological order, combine Layer 1 content + Layer 2 extractions into a compact context summary, typically no more than 600 characters.

Step 4: Update Memory File Write high-persistence-value information (user preferences, long-term goals, important decisions) to the memory file. See memory-template.md for format.

Step 5: Inform the User Briefly explain what was compressed and what key information was preserved, so the user knows the context has been updated.


OpenClaw Multi-Channel Supplementary Rules

OpenClaw runs across multiple messaging platforms, pay extra attention:

Group chat scenarios: Other members' messages default to Layer 3 (discard) unless the user explicitly responds to or quotes that message.

Cross-day conversations: Judge by topic unit, not time unit. An unfinished task from yesterday belongs to Layer 1; a completed topic from yesterday drops one level today.

Channel switching: If the user asks similar questions on different channels (WhatsApp vs Telegram), it indicates genuine concern — promote priority to Layer 1.


Optional: Auto-Trigger (Hook Configuration)

If you use Claude Code or an agent that supports PreCompact hooks, you can configure auto-trigger. See setup-hook.md for details.

Without hook configuration, you can trigger manually: just tell the agent "compress my context" or "context is getting long, clean it up".

Comments

Loading comments...