LiQun Context Manager

管理对话上下文和记忆提取。根据关键词高效检索历史记忆。

Security Scan

The skill mostly matches its stated purpose, but its implementation scans a 'skills' directory (in addition to 'memory'), which is unexpected and could expose unrelated skill files or secrets.

Purpose & Capability

Name/description (manage conversation context, search memories) align with the provided functions search_memory and get_recent. However, SEARCH_DIRS includes both 'memory' and 'skills' — searching 'skills' is not mentioned in the description and is disproportionate to a memory-only manager.

Instruction Scope

SKILL.md demonstrates use of search_memory and get_recent and makes no mention of scanning a 'skills' directory. The runtime code walks both 'memory' and 'skills' and returns file paths for any .md/.json containing the keyword — this expands scope to potentially read other skill files/configs not related to conversation memory.

Install Mechanism

Instruction-only style with a small included Python module; there is no installer, no downloads, and no packages declared. Low install risk.

Credentials

The skill does not request environment variables, credentials, or config paths. The code does not access environment variables or network resources.

Persistence & Privilege

always is false and no special privileges or persistent system changes are requested. The skill does not modify other skills or system configurations.

What to consider before installing

This skill's code is small and mostly consistent with a memory-search tool, but it also searches a 'skills' directory which is not documented in SKILL.md. That could reveal files belonging to other skills (including configs or secrets) if such files exist. Before installing: (1) ask the author why 'skills' is included and request limiting SEARCH_DIRS to the dedicated memory directory; (2) inspect the contents of any local 'skills' directory you use and remove or relocate sensitive files; (3) consider modifying the code to only return safe metadata (e.g., filenames in a designated memory folder) or to return content snippets rather than full paths; (4) if you run this in an environment with other skill code or secrets, avoid installing until the SEARCH_DIRS behavior is clarified. If you want, I can produce a patched version that only searches the 'memory' directory and/or filters paths by an allowlist.

Context Manager Skill

功能

• 搜索记忆文件
• 提取相关上下文
• 管理会话状态

使用方法

from context_manager import search_memory, get_recent

# 搜索记忆
results = search_memory('关键词')

# 获取最近记忆
recent = get_recent(5)