Lightweight Knowledge Base

v1.0.0

轻量级知识库与任务管理体系。结构化 JSON + MD 混合存储,支持用户画像、任务节奏、知识索引、每日自动进化。适用于中小规模记忆管理。

3· 1.5k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description describe a local JSON+MD KB and the included scripts implement that. However the scripts use a hardcoded WORKSPACE_DIR (/root/.openclaw/workspace) instead of a relative or configurable path, and data files reference external services and a 'tools' file that may hold API keys — the skill does not declare any required credentials. This mismatch is noteworthy but could be an implementation choice.
!
Instruction Scope
Runtime instructions ask the agent to run init.sh, query.sh and daily_evolve.sh. Those scripts create directories and files, update JSON timestamps, and read/write under /root/.openclaw/workspace and the skill's data/ directory. They do not call the network or exfiltrate data, but they will modify filesystem state outside the skill folder (creating memory/kb, outputs, temp under the hardcoded workspace). The hardcoded root path is surprising and may cause unexpected writes or permission failures.
Install Mechanism
There is no external install/download step — the skill is instruction + bundled scripts and data. No remote code is fetched and no package managers are invoked, lowering install-time risk.
Credentials
The skill declares no required environment variables or credentials, which is consistent with its offline file-based operation. However bundled data (user_profile.json, kb_index.json) mentions external services (SiliconFlow, WebDAV, Feishu) and a 'tools' entry that implies API keys/config could be stored in repo files. If the skill is later extended to integrate those services, it will likely ask for secrets — currently none are requested, but the presence of placeholders for API keys is a minor red flag.
Persistence & Privilege
always:false and agent invocation is normal. The skill writes/creates directories and files under the hardcoded workspace path and skill data; it does not modify other skills or system-wide configs. The persistence is limited to the workspace it targets, but using /root/.openclaw/workspace may give it broader access depending on the agent process user.
What to consider before installing
This skill appears to implement a local knowledge base and task scheduler, but review and consider the following before installing: - Review the scripts in a safe environment: init.sh and daily_evolve.sh will create and update files and directories under /root/.openclaw/workspace (hardcoded). If your agent does not run as root, the scripts may fail or unexpectedly write under /root if run with elevated privileges. - If you don't want writes under /root, edit the scripts to set WORKSPACE_DIR to a path you control before running init.sh/daily_evolve.sh. - The bundled JSON references external services and a 'tools' entry that could contain API keys. Currently the skill does not request environment variables, but it could be extended to store or use credentials — avoid populating API keys into these files unless you trust the skill. - There are no network calls in the scripts, which reduces immediate exfiltration risk, but because the skill stores user profile and tooling info locally, check those files for any sensitive content before installation. - If you plan to let the agent invoke this skill autonomously, be aware it will run scripts that modify workspace files on schedule; only enable autonomous runs if you trust the skill and have reviewed/adjusted the workspace path. If you want me to, I can rewrite the scripts to use a configurable workspace path, remove hardcoded root usage, and add explicit checks before writing any files.

Like a lobster shell, security has layers — review code before you run it.

jsonvk978pts5pnwfqf4jcz50n61tjs80jxapknowledge-basevk978pts5pnwfqf4jcz50n61tjs80jxaplatestvk978pts5pnwfqf4jcz50n61tjs80jxapmemoryvk978pts5pnwfqf4jcz50n61tjs80jxaptask-managementvk978pts5pnwfqf4jcz50n61tjs80jxap

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments