Agent Memory System New

PassAudited by ClawScan on May 10, 2026.

Overview

This is a local persistent-memory skill whose behavior is mostly disclosed and purpose-aligned, but it adds long-lived memory files and optional scheduled jobs that users should understand.

Install this only if you want the agent to keep local long-term memory. Review the installer before running it, decide whether to enable cron, use dry-run for garbage collection first, and periodically inspect ~/.openclaw/workspace/memory for sensitive or outdated entries.

Findings (5)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Private, outdated, or incorrect notes stored in memory could influence future agent behavior.

Why it was flagged

The skill intentionally creates persistent memory that future agent sessions may read and update, including people-related information.

Skill content
会话开始 - 读取 MEMORY.md 获取核心记忆 ... 人物信息 → 记录到 people/
Recommendation

Review the memory directory regularly, avoid storing sensitive personal data unless intended, and delete or correct stale entries.

What this means

After setup, local memory files may be created, summarized, or archived automatically without a manual run each time.

Why it was flagged

The installer can add cron jobs that run the memory garbage-collection and reflection scripts on a recurring schedule.

Skill content
echo "0 0 * * 0 $SCRIPT_DIR/memory-gc.sh" ... echo "45 23 * * * $SCRIPT_DIR/nightly-reflection.sh"
Recommendation

Only enable the cron jobs if you want automatic maintenance, and inspect crontab with `crontab -l` if you later want to disable them.

What this means

Older memory files may be relocated, which is expected for this skill but could surprise users looking for files in their original location.

Why it was flagged

The GC script automatically moves older Markdown files from the memory root into an archive directory.

Skill content
find "$MEMORY_DIR" -maxdepth 1 -name "*.md" -type f -mtime +30 ... mv "$file" "$ARCHIVE_DIR/$CURRENT_MONTH/$filename"
Recommendation

Run `memory-gc.sh --dry-run` first and keep backups if the memory directory contains important notes.

What this means

Using an unintended skill name could create or replace local skill files, affecting the agent's available skills.

Why it was flagged

The lesson-to-skill extraction script creates skill directories from user-provided names and can overwrite an existing skill directory after confirmation.

Skill content
SKILL_DIR="$SKILLS_DIR/$SKILL_NAME" ... rm -rf "$SKILL_DIR" ... mkdir -p "$SKILL_DIR"
Recommendation

Use simple, expected skill names, read overwrite prompts carefully, and review generated skill files before relying on them.

What this means

The mismatch may make it harder to confirm the exact package identity and provenance.

Why it was flagged

The package's internal metadata differs from the supplied registry metadata, which lists a different owner, slug, and version for the evaluated skill.

Skill content
"ownerId": "kn72s985ezqxkxnjd14wa6bh45828fcy", "slug": "agent-memory-system", "version": "1.0.1"
Recommendation

Verify that this is the intended package before installation, especially because it can add scheduled local maintenance tasks.