Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Memory Integration

v0.1.0

同步 OpenClaw 记忆文件到共现图和语义向量库,支持增量更新及语义加共现的统一搜索接口。

0· 201·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for whoisme007/memory-integration.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Memory Integration" (whoisme007/memory-integration) from ClawHub.
Skill page: https://clawhub.ai/whoisme007/memory-integration
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install memory-integration

ClawHub CLI

Package manager switcher

npx clawhub@latest install memory-integration
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The SKILL.md describes memory synchronization to a co-occurrence engine and a semantic vector store; the included Python implements parsing memory files, computing IDs, updating co-occurrence, and optional vector-store usage — broadly aligned with the stated purpose. However, naming mismatches (SKILL.md refers to MemoryIntegrationAdapter while the code provides MemoryIntegration) and inconsistent default paths (SKILL.md: ~/workspace/... vs code default /root/.openclaw/workspace) reduce confidence that the package is well-formed.
!
Instruction Scope
SKILL.md and example usage instruct importing MemoryIntegrationAdapter from integration.adapter.memory_integration_adapter, but the repository only contains scripts/memory_integration.py with a MemoryIntegration class. The runtime code appends a hard-coded absolute sys.path (/root/.openclaw/workspace/skills/memory-sync-enhanced/scripts) that references a different name ('memory-sync-enhanced'), and expects external adapter modules (integration.adapter.co_occurrence_adapter, integration.adapter.semantic_vector_adapter) that are not included. These inconsistencies mean an agent following SKILL.md may fail or load adapters from unexpected locations; the instructions also allow reading and writing workspace memory files and a sync config file (within the workspace) which is consistent with purpose but should be confirmed.
Install Mechanism
No install spec is provided (instruction-only with included script). That minimizes install-time risk but means runtime behavior depends on environment layout and presence of adapter plugins. Nothing in the package attempts to download or execute remote installers.
!
Credentials
SKILL.md declares environment variables (MEMORY_SYNC_CONFIG, SYNC_INTERVAL_HOURS, ENABLE_SEMANTIC_SYNC, ENABLE_COOCCURRENCE_SYNC) but the code only reads OPENCLAW_WORKSPACE (default /root/.openclaw/workspace) and does not reference MEMORY_SYNC_CONFIG or the other declared vars. This mismatch is suspicious: either the documentation is stale or the code relies on implicit workspace paths. The code writes/reads a sync config under workspace/integration/memory_sync_config.json — this is reasonable for a memory-sync tool but you should verify the effective path and that no unrelated files are accessed. No credentials are requested.
Persistence & Privilege
The skill is not always:true and is user-invocable (normal). It writes a sync state file inside the workspace and manipulates files under workspace/memory and MEMORY.md; it does not request system-wide privileges or modify other skills' configs in the supplied code. Autonomous invocation is allowed by default (not a separate concern) but combine with other red flags before enabling fully autonomous usage.
What to consider before installing
This package likely implements the claimed memory-sync feature, but several inconsistencies make it untrustworthy until verified. Before installing or enabling: 1) Request the full source or repository (homepage/source unknown). 2) Confirm presence and contents of the required adapter modules (integration.adapter.co_occurrence_adapter and integration.adapter.semantic_vector_adapter) and inspect them for network I/O or credential usage. 3) Verify which environment variable controls the workspace/config path in your runtime (the code uses OPENCLAW_WORKSPACE; SKILL.md documents different vars/defaults) and ensure the config path is confined to a safe workspace. 4) Test in an isolated environment (non-production agent) to observe file reads/writes and any outbound connections. 5) Ask the author to fix naming/path mismatches (MemoryIntegrationAdapter vs MemoryIntegration, memory-integration vs memory-sync-enhanced) or provide a reconciled release; if the author cannot explain these inconsistencies, treat the skill as suspicious and avoid enabling autonomous invocation. If you can obtain and review the missing adapter modules and they look benign (no unexpected network endpoints or secrets exfiltration), the concerns would be largely resolved and this could be reclassified as benign.

Like a lobster shell, security has layers — review code before you run it.

latestvk974f8zry05awet09q5hy2e0as835hff
201downloads
0stars
1versions
Updated 1h ago
v0.1.0
MIT-0

memory-integration

记忆集成插件,为 OpenClaw 星型记忆架构提供记忆同步与增强搜索服务。

🎯 功能

  • 记忆同步:将 OpenClaw 原生记忆(MEMORY.md, memory/*.md)同步到共现图和语义向量库
  • 增强搜索:提供语义搜索 + 共现关联搜索的统一接口
  • 增量同步:仅同步新增或修改的记忆片段,避免重复处理
  • 记忆标识:为每个记忆片段生成唯一 ID,支持跨系统引用
  • 统一接口:通过标准适配器与其他插件(共现引擎、语义向量库、自我改进系统)交互

📦 安装

# 从 ClawHub 安装
clawhub install memory-integration

# 或从本地目录安装
clawhub install ./skills/memory-integration

⚙️ 配置

环境变量:

  • MEMORY_SYNC_CONFIG:同步配置文件路径(默认:~/workspace/integration/memory_sync_config.json
  • SYNC_INTERVAL_HOURS:增量同步间隔(默认:24 小时)
  • ENABLE_SEMANTIC_SYNC:是否启用语义向量同步(默认:true)
  • ENABLE_COOCCURRENCE_SYNC:是否启用共现图同步(默认:true)

配置文件示例 (memory_sync_config.json):

{
  "last_sync": "2026-03-18T10:00:00",
  "file_hashes": {
    "/path/to/memory/2026-03-18.md": "abc123..."
  }
}

🚀 快速开始

from integration.adapter.memory_integration_adapter import MemoryIntegrationAdapter

# 初始化
adapter = MemoryIntegrationAdapter()

# 同步所有记忆
result = adapter.sync_all_memories()
print(f"同步了 {result['synced_count']} 条新记忆")

# 增强搜索
query = "插件升级"
results = adapter.search(query, max_results=10)
for result in results:
    print(f"记忆 ID: {result['memory_id']}, 相似度: {result['score']:.3f}")

🔌 适配器接口

插件提供标准适配器 MemoryIntegrationAdapter,包含以下方法:

  • sync_all_memories(): 同步所有记忆文件到关联存储
  • sync_memory_file(file_path): 同步单个记忆文件
  • search(query, max_results=10): 执行增强搜索(语义 + 共现)
  • record_cooccurrence(memory_id1, memory_id2, strength=1.0): 记录记忆共现
  • get_memory_by_id(memory_id): 根据 ID 获取记忆内容
  • health_check(): 检查插件健康状态

📁 文件结构

memory-integration/
├── SKILL.md                    # 本文件
├── scripts/
│   ├── memory_integration.py   # 核心集成类
│   └── __init__.py
├── config/
│   └── default_config.json     # 默认配置
└── references/
    └── integration_guide.md    # 集成指南

🔗 依赖关系

  • 共现引擎插件 (co-occurrence-engine):提供共现图存储与查询
  • 语义向量库插件 (semantic-vector-store):提供向量嵌入与相似度搜索
  • OpenClaw 原生记忆:MEMORY.md 与 memory/*.md 文件

📈 版本历史

  • v0.1.0 (2026-03-18):初始版本,提供记忆同步与增强搜索基础功能

🤝 贡献

欢迎提交 Issue 和 Pull Request 到 ClawHub 仓库。

Comments

Loading comments...