首页龙虾技能列表 › Memory Vault — AI 代理私有持久记忆

Memory Vault — AI 代理私有持久记忆

v1.0.2

Memory Vault 为 AI 代理提供私有、持久的记忆系统,支持跨会话记忆和对 LLM 可见内容的控制。它提供三层隐私保护(公开、局部、锁定),支持分层回忆、关键词和语义搜索,确保敏感数据不暴露给 LLM 提供商。

0· 133·0 当前·0 累计
by @girllove2code (GirlLove2Code)·MIT-0
下载技能包
License
MIT-0
最后更新
2026/4/10
安全扫描
VirusTotal
可疑
查看报告
OpenClaw
可疑
high confidence
安全扫描发现技能依赖项与本地加密向量存储相符,但运行指令要求从未审查的第三方 GitHub 仓库克隆和导入代码,且未解释加密密钥管理,存在安全风险。
评估建议
该技能内部不一致,发布包仅包含指令,要求从外部 GitHub 仓库克隆和执行代码,未说明加密密钥管理。安装前建议:(1)检查 GitHub 仓库和最近提交;(2)验证加密密钥管理;(3)在沙盒或临时 VM 中运行;(4)优先使用版本化发布或包含实际代码;(5)限制权限并监控网络活动。若无法完全审查,勿安装。...
详细分析 ▾
用途与能力
The skill claims to provide a local, privacy-focused persistent memory (vector search + encryption). The declared Python packages (chromadb, cryptography) are coherent with that purpose. However, the skill bundle contains no code files; the SKILL.md instructs the agent to git-clone https://github.com/GirlLove2Code/Memory-Vault into ~/memory-vault and import modules from it. Requiring an external repo at runtime (not part of the published bundle) is disproportionate and inconsistent with the registry contents.
指令范围
The SKILL.md tells the agent to clone a remote GitHub repository and then add that directory to sys.path and import modules (recall, entry_manager, branch_manager, etc.). That means the agent will execute arbitrary third‑party Python code at runtime. The instructions also describe encrypting a 'Locked' tier but do not specify how encryption keys are provided or protected. The runtime steps therefore go beyond simple, declarative integration and grant broad discretion to run external code and write/read files in the user's home directory.
安装机制
The registry install spec declares pip packages (chromadb, cryptography) which are reasonable. But the SKILL.md's installation step uses git clone to pull code from a third‑party GitHub account — an untrusted download/execute pattern. The install behavior (cloning and executing external repo code) is higher risk than the uv package installs and is not captured in the registry's install spec.
凭证需求
The skill declares no required environment variables or credentials, yet it advertises encrypted 'Locked' storage for secrets. There is no guidance about where encryption keys come from (env var, passphrase prompt, OS keyring), nor any declared primary credential. The absence of a described key-management mechanism is a proportionality and transparency concern: storing encrypted secrets without specifying how keys are derived/stored risks silent insecure behavior or hidden exfiltration vectors.
持久化与权限
The skill is not force-enabled (always: false) and does not request system-wide privileges. However, it instructs cloning code into ~/memory-vault, modifying sys.path, and persisting a local vector DB and encrypted files — which gives it persistent presence on disk. This is expected for a local memory store but increases risk because the runtime code comes from an external repo.
安全有层次,运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发,无需署名。

运行时依赖

无特殊依赖

版本

latestv1.0.22026/3/20

当前版本(1.0.2)无变化 — 仅版本更新,无文件更改或新功能,功能和文档与之前版本相同。

● 可疑

安装命令 点击复制

官方npx clawhub@latest install memory-vault
镜像加速npx clawhub@latest install memory-vault --registry https://cn.clawhub-mirror.com

技能文档

Memory Vault > 真正跨会话工作的记忆 — 无云、无 API 密钥,只有结果。其他记忆技能存储代理知道的内容。Memory Vault 还控制谁可以看到这些内容。三层隐私保护(公开、局部、锁定)意味着代理可以处理敏感数据而不将其暴露给 LLM 提供商。支持分层回忆、自动重要性评分、冲突检测和内容感知过期。零基础设施,无需 Ollama。

数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制

了解定制服务