Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Good Memory

v2.0.1

Session 历史记录恢复技能。Session重置后自动恢复对话上下文,解决系统自动重置导致的"失忆"问题。

0· 222·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for acilgit/good-memory.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Good Memory" (acilgit/good-memory) from ClawHub.
Skill page: https://clawhub.ai/acilgit/good-memory
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: bash, tail, ls, python3
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install good-memory

ClawHub CLI

Package manager switcher

npx clawhub@latest install good-memory
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The stated purpose (detect session resets and restore prior JSONL-based conversation history) matches what the scripts do: scanning sessions, reading sessions.json and session JSONL files, and outputting prior messages. However the skill also injects commands into a global AGENTS.md and writes a persistent session-tracker.json — behavior that is more intrusive than the minimal read-only recoverer the description implies, though it can be justified as integration work.
!
Instruction Scope
Runtime instructions and scripts read session files and sessions.json, update and write a workspace session-tracker.json, and inject an automatic startup command into AGENTS.md. The autorecover script prints recovered history to stdout so the platform will add it to the conversation context (expected for this purpose) but that implies broad read access to historic transcripts. The code also hardcodes /root/.openclaw paths and will operate system-wide (not sandboxed). There is also a coding bug: autorecover.py references current_uuid in an implicit-switch check though that variable is never defined, indicating sloppy implementation which could lead to unexpected behavior.
!
Install Mechanism
Although the package includes local install scripts, the documentation and top-level install.sh instruct users to download a zip via curl from https://wry-manatee-359.convex.site and pipe it to bash/unzip. That domain is not a standard well-known release host (not GitHub releases or an obvious project domain). Download-and-execute from an external host is high-risk and disproportionate for a relatively small utility.
!
Credentials
The skill does not request credentials (no env secrets), which is good, but it accesses and modifies sensitive local configuration and data: reads all sessions JSONL (potentially containing private message content), writes session-tracker.json into workspace, and injects entries into AGENTS.md. Those actions are functionally related to the stated purpose but are elevated privileges relative to a simple helper — they should be clearly authorized by the administrator before install.
!
Persistence & Privilege
The installer and scripts create persistent artifacts (session-tracker.json, autorecover.log) and modify AGENTS.md to cause automatic execution on session startup. The skill is not marked always:true, but it does establish long-lived behavior and modifies system-wide agent configuration. This persistence and configuration modification are significant and should be explicitly approved.
What to consider before installing
This skill is doing what it claims (reading session JSONL to rebuild conversation context), but it also makes persistent, system-wide changes and the recommended one-line install downloads code from an unfamiliar host. Before installing: 1) Do NOT run the curl | bash one-liner unless you trust the download host. 2) Inspect the included scripts yourself (they are present in the bundle) and confirm they match what you expect. 3) Back up AGENTS.md and your workspace before running the installer — the installer injects commands into AGENTS.md. 4) Prefer installing from a trusted release (official GitHub release or your org's artifact repository) rather than the convex.site URL. 5) Consider running the skill in a test/non-production environment first to observe behavior and logs (autorecover.log, session-tracker.json). 6) If you are uncomfortable with system-wide modification, ask the author to provide a non-intrusive deployment mode (manual opt-in per agent, documentation of exactly what is written to AGENTS.md and tracker) or a version that only reads files without injecting startup hooks. Finally, note the code has at least one bug (undefined current_uuid) — ask the maintainer for a fixed release before trusting it in production.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🧠 Clawdis
Binsbash, tail, ls, python3
latestvk977qy33b2rb9zd6vxap1c4s9s83sn7n
222downloads
0stars
9versions
Updated 1mo ago
v2.0.1
MIT-0

Good-Memory v2.0.0

帮助 Agent 在 session 重置后快速恢复对话上下文。通过检测 .reset. 后缀的 session 文件实现,安装后自动运行,无需手动操作

核心特性

  • 全平台支持:支持飞书、Discord、Telegram、Signal等所有OpenClaw平台
  • 零配置:安装后自动生效,不需要修改配置
  • 轻量高效:仅基于文件名匹配,不需要解析文件内容,速度快
  • 低侵入性:默认只修改main的AGENTS.md,不影响其他Agent
  • 自动清理:历史记录最多保留10条,自动清理过期文件

工作原理

  1. 重置检测:每次session启动时自动检测两种重置类型:
    • 显式重置:session 文件被系统添加 .reset. 后缀(系统自动重置 /new /reset 命令触发)
    • 隐式切换:新 session UUID 生成但旧 session 未打 reset 标记(系统自动会话轮换/后台重启触发)
  2. 历史恢复:如果检测到重置/切换,自动读取上一个会话文件的最后50条对话
  3. 自动提示:首条回复会告知用户已恢复历史记录

安装

🚀 一键安装(推荐)

# 下载并安装
curl -sSL https://wry-manatee-359.convex.site/api/v1/download?slug=good-memory | bash -s install

手动安装

# 1. 创建目录
mkdir -p ~/.openclaw/workspace/skills/good-memory
cd ~/.openclaw/workspace/skills/good-memory

# 2. 下载解压
curl -L https://wry-manatee-359.convex.site/api/v1/download?slug=good-memory | unzip -

# 3. 执行安装
bash scripts/install.sh

环境变量(可选)

如果你的OpenClaw安装在非默认路径,可以设置:

export OPENCLAW_BASE="/path/to/your/openclaw"  # 默认:/root/.openclaw
export SESSIONS_DIR="/path/to/sessions"        # 默认:$OPENCLAW_BASE/agents/main/sessions
export AGENTS_MD="/path/to/AGENTS.md"          # 默认:$OPENCLAW_BASE/workspace/AGENTS.md

手动使用

# 查看最新的reset文件
bash ~/.openclaw/workspace/skills/good-memory/scripts/recovery.sh latest

# 读取最新reset的50条记录
bash ~/.openclaw/workspace/skills/good-memory/scripts/recovery.sh read --lines 50

# 列出所有reset文件
bash ~/.openclaw/workspace/skills/good-memory/scripts/recovery.sh list

数据结构

session-tracker.json 格式(简化版):

{
  "description": "Session tracker - maps agent+chat to session files",
  "last_updated": "2026-03-27T15:00:00Z",
  "agents": {
    "main": {
      "ou_123456": {
        "session_key": "",
        "active": "/path/to/current.jsonl",
        "active_uuid": "abc123",
        "last_history": "/path/to/old.jsonl.reset.2026-03-27T15:00:00Z",
        "history": [
          "/path/to/old.jsonl.reset.2026-03-27T15:00:00Z",
          "/path/to/older.jsonl.reset.2026-03-26T10:00:00Z"
        ]
      }
    }
  }
}

Comments

Loading comments...