Memory Sync CN
v1.0.0记忆同步系统 - 自动同步 MEMORY.md 与 CortexGraph，支持遗忘曲线和智能检索
⭐ 0· 680·4 current·4 all-time
byGuohongbin@guohongbin-git
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description, required binaries (cortexgraph, mcporter), and the scripts all align with a memory-sync purpose. Minor inconsistency: SKILL.md documents installing the Python 'cortexgraph' package but the registry install spec only declares the Node 'mcporter' package; the Python install is not reflected in the registry metadata.
Instruction Scope
Runtime instructions and included scripts explicitly read user files (~/.openclaw/workspace/MEMORY.md and per-day files) and send their contents to cortexgraph via mcporter calls. Scripts do not filter or redact content and even map a section named '宏斌的 API Keys' (api-keys) — meaning secrets present in MEMORY.md would be imported into CortexGraph. SKILL.md also provides commands for automated promotion, GC, and auto-recall which may change or surface stored memories.
Install Mechanism
Install items are public package installs (npm for mcporter, SKILL.md suggests pip for cortexgraph). No arbitrary URL downloads or extract-from-URL steps were found. The mismatch between registry install spec (only mcporter) and SKILL.md (cortexgraph + mcporter) is worth confirming before install.
Credentials
The skill requests no environment variables, but its instructions and scripts require and read local config files (~/.config/cortexgraph/.env and ~/.openclaw/workspace/config/mcporter.json) and workspace files. Those files can contain storage paths and credentials. The scripts will import arbitrary sections from MEMORY.md (including ones explicitly labeled for API keys or identity), so the effective access to secrets is disproportionate unless the user ensures MEMORY.md contains no sensitive data.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and uses normal agent-invocation patterns. It does require installation of binaries but does not request elevated system privileges in its manifest.
What to consider before installing
This skill performs exactly what it claims—reading your MEMORY.md and daily logs and pushing them into a CortexGraph instance via mcporter—but that behavior can expose secrets. Before installing or running: 1) Inspect MEMORY.md and your daily logs and remove or redact any API keys, passwords, tokens, or personal identifiers. 2) Confirm the provenance and trustworthiness of the 'mcporter' npm package and the 'cortexgraph' Python package (check their registries, maintainers, and whether they contact remote services). 3) Confirm the expected locations of ~/.config/cortexgraph/.env and ~/.openclaw/workspace/config/mcporter.json and inspect those files for credentials or remote endpoints. 4) Prefer running scripts with --dry-run first and avoid enabling automatic promotion until you are confident about what will be written to long-term memory. 5) Because registry/install metadata and SKILL.md differ (cortexgraph install appears in SKILL.md but not in registry), verify the full install steps manually before trusting automated installs.Like a lobster shell, security has layers — review code before you run it.
cortexgraphvk9770rdtcvv0n4587h27z25xhh81ej1platestvk9770rdtcvv0n4587h27z25xhh81ej1pmcpvk9770rdtcvv0n4587h27z25xhh81ej1pmemoryvk9770rdtcvv0n4587h27z25xhh81ej1p
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis
Binscortexgraph, mcporter
Install
Install mcporter (Node.js)
Bins: mcporter
npm i -g mcporter