Skill Memory
v1.1.0Routes tasks to preferred skills with preset parameters for images, videos, screenshots, TTS, news aggregation, and trending topics.
⭐ 0· 94·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (task-to-skill routing and preset parameters) align with included files: a JSON memory file, a mapping table in SKILL.md, and a small script to list/record/update entries. No unrelated credentials, binaries, or installs are requested.
Instruction Scope
Instructions focus on checking/updating a local memory.json and include Playwright usage to connect to an existing Chrome via CDP on http://localhost:9222. The SKILL.md's automatic-recording policy means the agent may persist parameters for tasks; the doc does not instruct reading unrelated system files or env vars, but connecting to a local Chrome instance can expose authenticated browsing state if used for screenshots.
Install Mechanism
No install spec — instruction-only plus a small Python script. Nothing is downloaded from external URLs or installed automatically.
Credentials
No environment variables, credentials, or external config paths are requested. The declared storage location is a workspace-relative memory.json; this is proportional to the skill's purpose but could contain sensitive content depending on what parameters are recorded.
Persistence & Privilege
The skill persists data to its own references/memory.json in the workspace and will increment usage_count / update entries. always:false and no modification of other skills' config. Persistent storage is expected for a memory feature but means recorded parameters may persist on disk in cleartext.
Assessment
This skill appears to do what it claims: store and reuse task→skill mappings. Before installing, consider: (1) memory.json is stored persistently in the workspace and will contain any 'params' you record — avoid passing secrets or credentials as params; (2) the Web Screenshot preset instructs connecting Playwright to a local Chrome CDP (http://localhost:9222) — if Chrome is running with active logins, screenshots or a misused CDP connection can expose private site content; (3) the update script runs locally and only writes to the skill's memory file, but if you prefer not to persist usage automatically, do not enable automatic recording in your agent flow and inspect memory.json periodically. If you need higher assurance, review the memory.json contents regularly, restrict filesystem permissions on the workspace, and avoid recording sensitive parameters.Like a lobster shell, security has layers — review code before you run it.
latestvk97bt5a5f2tgwn98z7kfgng6jd83p27q
License
MIT-0
Free to use, modify, and redistribute. No attribution required.