Key Tracker

v1.0.0

智能关键信息记录技能:从对话和报告中自动捕获时间节点、遗留问题、决策点、承诺事项等16类关键信息。外置大脑,不遗漏重要信息。

0· 180·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (capture deadlines, decisions, commitments, etc.) match the provided SKILL.md, README, and pattern files. The skill only asks the user to create a local records directory and defines regex-based detection rules — all coherent with its purpose. No unrelated env vars, binaries, or system config paths are requested.
Instruction Scope
Runtime instructions are instruction-only (no code) describing how to detect keywords and where to store records under ~/.openclaw/workspace/.keyrecords. The SKILL.md presumes the agent will 'automatically' detect and log from conversations, but it doesn't include concrete telemetry/exfiltration steps or external endpoints. Important: it instructs the agent to collect and persist conversation text locally (source_text fields) but does not provide guidance for access control, encryption, or retention — a privacy scope consideration.
Install Mechanism
There is no install spec or packaged code to download; recommended actions are a ClawHub install command or a git clone from the stated GitHub repository. These are expected and proportionate. Because there is no packaged installer or remote binary payload, there is low install risk from this bundle itself.
Credentials
The skill requests no environment variables, credentials, or privileged config paths. That is proportional to its described functionality. Note: the lack of required credentials also means any storage/authorization decisions are left to the host environment (no built-in encryption or storage ACLs are declared).
Persistence & Privilege
The skill is not 'always: true' and uses default autonomous invocation settings. That's normal for skills, but because the instructions tell the agent to automatically log conversation contents, users should be aware the agent may record sensitive information unless they limit invocation or control storage. The skill does not attempt to modify other skills or system settings.
Assessment
This skill is internally consistent with its purpose, but before installing: 1) Confirm the GitHub source is trustworthy (review the repository you will clone or install via ClawHub). 2) Be aware it will store conversation text and extracted items under ~/.openclaw/workspace/.keyrecords — that may contain sensitive data; set appropriate filesystem permissions, consider encrypting the directory, or use a private workspace. 3) Because SKILL.md is instruction-only, review how your agent will be triggered (disable autonomous invocation if you do not want automatic logging). 4) If you need retention, deletion, or access controls, implement them externally (the skill provides no built-in encryption/ACL guidance). 5) If you want stronger assurance, request or inspect actual runtime code (the package is instruction-only here) or run the skill in an isolated environment first.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fgmetdphqqd7w5x6dv3ffrx82rqez

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🧠 Clawdis

Comments