Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Hippocampus

v0.1.1

Daily incremental update of HIPPOCAMPUS.md — domain-filtered 14-day rolling context. Universal skill for all agents.

0· 91·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for comicsansbestfont/hippocampus-sync.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Hippocampus" (comicsansbestfont/hippocampus-sync) from ClawHub.
Skill page: https://clawhub.ai/comicsansbestfont/hippocampus-sync
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install hippocampus-sync

ClawHub CLI

Package manager switcher

npx clawhub@latest install hippocampus-sync
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The stated purpose (daily incremental update of HIPPOCAMPUS.md, domain-filtered 14-day rolling context) aligns with the instructions and the included decay.py script: the skill reads memory files, an events DB, peer HIPPOCAMPUS files, and writes/archives learnings. However the SKILL.md expects runtime utilities (sqlite3, python3) and access to many absolute/central paths (~/.openclaw/*, OC/...), yet the registry metadata lists no required binaries or credentials — a minor but relevant mismatch.
!
Instruction Scope
SKILL.md instructs the agent to run shell commands (sqlite3 query against ~/.openclaw/events.db), traverse and read many workspace and cross-workspace files (absolute and relative paths), and to run an included decay script that will modify files under each workspace's .learnings (LEARNINGS.md, ERRORS.md, FEATURE_REQUESTS.md), archive and delete blocks. Those reads/writes are consistent with the purpose, but they cover a wide surface (cross-agent HIPPOCAMPUS files, BU captures, cron logs, CRM hubs). The instructions also assume the script lives at ~/.openclaw/skills/hippocampus-sync/scripts/decay.py and that sqlite3/python3 are available — this is not declared in metadata and may fail or unexpectedly touch system paths. The instructions are prescriptive and perform destructive edits (removing archived blocks), so review/backup is recommended.
Install Mechanism
No install spec (instruction-only) reduces supply-chain risk, and the code file included (scripts/decay.py) matches the declared behavior. But SKILL.md references an absolute path (~/.openclaw/skills/hippocampus-sync/scripts/decay.py) when invoking the script; because there's no install step documented, it's unclear whether the runtime will place the script at that path. That assumption mismatch could lead to errors or ad-hoc instructions to write the script into users' home directories — which would be higher risk if done automatically.
Credentials
The skill requests no environment variables or credentials (good), and does not call external APIs per the instructions. However it does read potentially sensitive local artifacts (events.db, peer HIPPOCAMPUS, CRM hub files, various artifacts across OC). Those local reads are proportional to a cross-agent hippocampus sync but are broad: the agent will have read access across many domain files. No secrets are requested, but data exposure risk exists through broad filesystem reads.
Persistence & Privilege
The skill is not marked always:true and uses default autonomous-invocation behavior. It writes/edits workspace files (HIPPOCAMPUS.md and files under .learnings) which is reasonable for its purpose. There is no evidence it modifies other skills' configs or requests persistent global privileges beyond normal filesystem access.
What to consider before installing
This skill appears to do what it says (maintain HIPPOCAMPUS.md and decay old learnings) but has a few practical inconsistencies and broad file access that you should consider before installing: - The SKILL.md runs shell commands (sqlite3) and python3 scripts but the metadata declares no required binaries; ensure sqlite3 and python3 exist in the runtime or the skill will fail. Ask the author to declare required binaries. - The instructions read and write many files across ~/.openclaw and other cross-workspace paths (peer HIPPOCAMPUS, CRM hubs, cron logs). If you install this, the agent will have read access to a wide set of local data and will modify .learnings/LEARNINGS.md (it can change status, archive blocks, and remove content). Backup relevant files and run in a safe/test workspace first. - The SKILL.md expects the decay script at an absolute path (~/.openclaw/skills/hippocampus-sync/scripts/decay.py) but there is no install step showing placement there. Confirm how the platform exposes the skill's scripts at runtime (and that the script won't be copied into arbitrary home directories without your consent). - If you rely on sandboxing for certain agents (e.g., Bobina), verify the platform enforces the relative-path-only rule described in the doc; otherwise absolute reads could bypass intended isolation. Recommended actions before proceeding: 1) Ask the publisher to update metadata to list required binaries (sqlite3, python3) and to provide an explicit install step or clarify runtime paths. 2) Review and back up any HIPPOCAMPUS.md and .learnings files. 3) Test the skill in a non-production workspace to confirm what files it reads/writes. 4) If you have sensitive local data, restrict the agent's filesystem permissions or refuse installation until the scope of file access is narrowed/confirmed.

Like a lobster shell, security has layers — review code before you run it.

latestvk977y679490nrnwgy4ent07mp583f9c3
91downloads
0stars
2versions
Updated 1mo ago
v0.1.1
MIT-0

Hippocampus Sync — Universal

Sachee reads these files to make decisions. A bad hippocampus wastes his time; a good one surfaces what needs attention and why.

Daily incremental update of HIPPOCAMPUS.md for all 13 agents. Detects agent ID from IDENTITY.md **ID:** field, looks up domain config below, runs universal process with domain-specific sources and framing. If no ID match, write minimal HIPPOCAMPUS from own memory only.


1. Activity Feed

All agents except Bobina query events.db first (most authoritative source):

sqlite3 ~/.openclaw/events.db "SELECT ts, type, summary, detail FROM events WHERE ts > datetime('now', '-24 hours') AND bu IN ('{bu}', 'portfolio') ORDER BY ts DESC"

Replace {bu} with your BU. Events override memory files on contradiction. Bobina: skip — sandboxed. Read from memory files and reports where results are already captured; do not query external APIs (Supabase, PostHog, GSC, Notion, Hashnode, Agent Commune).


2. Agent Domain Registry

Read references/agent-registry.md and find your agent's config block by ID. Each entry contains: ID, BU, target size, framing question, sections, track/exclude, voice, sources.


2.5 Source & Domain Rules

Track-First: Your registry Track list is exhaustive. If information doesn't serve an item on your Track list, it does not belong in your HIPPOCAMPUS — regardless of which source it came from. The Track list is your domain boundary. Everything outside it is another agent's responsibility.

Peer Compression: Information from outside your own workspace (peer HIPPOCAMPUS files, BU captures, cross-workspace reads) compresses to one line per item in your output. If you can't say it in one line, you're absorbing detail that belongs to the owning agent. Your hippocampus carries your domain at depth; peer state is directional context only.

Source Priority:

  1. Own workspace (memory, artifacts, data) — full fidelity.
  2. Activity feed (events.db) — full fidelity for your BU events matching your Track list.
  3. Peer HIPPOCAMPUS (where listed in Sources) — read for state awareness, compress to 1 line per peer.
  4. BU captures (where listed) — filter entries to tags matching your domain. See per-agent capture filters in registry.

<process>

3. Universal Sync Process (10 Steps)

Step 1: Read existing HIPPOCAMPUS.md

Baseline: open threads, commitments, top of mind. If missing, seed from scratch.

Step 2: Read Activity Feed (24h)

Query from Section 1. Most authoritative source. Bobina: skip.

Step 3: Read own memory files (14d)

memory/YYYY-MM-DD*.md — filter by filename, don't read all files.

Step 4: Read domain-specific sources

Per registry. Rules: 14d window by filename, cross-workspace is read-only, CRM hubs selective (Bobo only for Open Thread entities), cron logs last 20 lines. Cross-workspace reads are context, not content. Extract only what maps to your Track list. If a peer memory file mentions deals, meetings, or metrics outside your Track list, skip it — the owning agent will cover it in their own file.

Step 5: Rewrite Top of Mind (fresh every sync)

Rewrite Top of Mind fresh each sync — 3-5 items weighted by urgency. Yesterday's priorities may not be today's. Weight by agent type:

  • Ruka: frequency, recency, emotional charge, unresolved tension, behavioral patterns
  • Cyclawps: severity (failures > improvements), staleness, impact radius
  • Advisory: commercial proximity, urgency, decision staleness, signal quality
  • JDN: revenue impact, seasonal urgency, team blockers, decision staleness
  • Billy: growth impact, market urgency, signal strength
  • Bobina: signal density, territory coverage, engagement quality
  • Ink: pipeline urgency, source freshness, voice calibration, publication gap
  • Fernando: build impact, blockers, technical debt

Step 6: Update Open Threads

Add new, update existing, flag 14d-inactive, remove resolved. Persist until resolved — not subject to 14d window.

Step 7: Update Commitments & Decisions Pending

Sachee owes + you owe. Checkbox format. Checked items drop next sync. Unchecked persist indefinitely.

Step 8: Update Recent Sessions (14d rolling)

Table: | Date | What Happened | Outcome / Significance |. Drop >14d. Substance, not mechanics.

Step 9: Update domain-specific section(s)

Read references/domain-sections.md for your agent's section definitions. Build sections per your registry Lead + Domain Sections config.

Step 10: Write, verify, deliver

  1. Read references/examples.md for before/after examples of good hippocampus entries.
  2. Write HIPPOCAMPUS.md. Timestamp: > Last updated: YYYY-MM-DD HH:MM AEST
  3. Verify size vs target. Over? Compress.
  4. Verify accuracy: verify every date against source files — a wrong date is worse than no date. Threads real, commitments sourced, domain data matches files.
  5. Domain enforcement check: Review every item in Top of Mind, Open Threads, Recent Sessions, and Commitments against your registry's Track/Exclude lists. Delete any item that falls under Exclude — even if it appeared in a source file tagged with your agent name. Common violations: content agents absorbing deal events, pipeline agents absorbing infrastructure changes, JDN agents absorbing advisory data. If in doubt, ask: "Is this my domain, or am I echoing another agent's work?"
  6. If material changes: append to memory/YYYY-MM-DD.md under ## Hippocampus Sync.
  7. Deliver via template below. No changes? NO_REPLY.

Step 10.5: Learnings Decay Check

Run the decay script against your workspace:

python3 ~/.openclaw/skills/hippocampus-sync/scripts/decay.py "$(pwd)"

The script marks pending entries >30 days as stale, archives stale entries >90 days to .learnings/archive/YYYY-MM.md, and flags files over 200 lines for manual compaction. If the output includes COMPACT: warnings, add a line to your HIPPOCAMPUS.md Top of Mind: "Learnings file needs compaction — {filename} at {N} lines."

No changes? No action needed — continue to delivery.

</process>

<output_template>

4. Output Template

# HIPPOCAMPUS — {Agent Name}
> {Role context}. Last updated: YYYY-MM-DD HH:MM AEST

## {Lead Section — if agent has one}
## Top of Mind
## Open Threads
## Commitments & Decisions Pending
## Recent Sessions (14d)
## {Domain Section 1}
## {Domain Section 2+}

No Lead Section? Start with Top of Mind.

</output_template>


5. Delivery Message

Hippocampus Sync Complete — {Mon DD, YYYY}

Updated HIPPOCAMPUS.md with 14-day rolling context:

Top of Mind:
* {3-5 items}

New This Sync:
* {What changed}

Risks Flagged:
* {Items needing attention}

File: HIPPOCAMPUS.md — {size} bytes

3-5 bullets max per section. Select the most important. No material changes? Reply NO_REPLY.


<quality>

6. Writing Quality

Rules

Every item answers: What? So what? What next?

  • Name consequences. "If below 80%, Sachee stops trusting cron" > "cron rate dropped"
  • Conditional triggers. "If no reply by Mar 14, escalate" > "follow up next week"
  • Connect threads. "Governance bloat = same files from Mar 2 build day"
  • Name patterns. "Building faster than stabilizing" / "decisions pile up while features ship"
  • When a source is missing, note the gap and move on — Sachee trusts these files because they don't guess.
  • Open Threads and Commitments persist until resolved. Not subject to 14d window.
  • Top of Mind is rewritten fresh every sync. Weighted by urgency — not appended to.
  • Activity feed is ground truth. Cross-workspace sources are read-only context.
  • Each metric needs trajectory. "Revenue up 12% vs last fortnight" > a bare number. If trajectory is unknown, say so — don't present a snapshot as if it tells a story.
  • Significance weighting matters. A high-stakes unresolved thread outranks a resolved routine task. Write what Sachee most needs to see, not what's most recent.
</quality>
<voice>

7. Voice by Agent

Brief notes only — full voice lives in each SOUL.md.

AgentVoice
RukaEmotional texture, Sachee's words, behavioral patterns, human not corporate
CyclawpsDiagnostic precision, system health leads, consequence chains, conditional triggers
BoboStrategic altitude, portfolio patterns, stakes language, thesis connection, relationship arcs
ReneeSignal-focused, conversion ratios, source quality, pipeline velocity
MalcolmEditorial tension, voice calibration texture, quality gates, pillar balance
AnandaFamily warmth, Dad's voice quoted, seasonal awareness, business consequences, marketing intelligence, content production
BillyOpinionated analyst, state the recommendation, market timing, don't hedge
BobinaField agent, territory ratings, honest self-assessment, signal chains
InkEditor's lens, source freshness, what unlocks movement, Sachee's edits as calibration
FernandoBuild-centric, git-driven, what's blocked / shipped / next
</voice>

Comments

Loading comments...