by 安全扫描
OpenClaw
安全
high confidence该技能的代码和指令与其声明的目的（本地日志/上下文管理）一致，数据存储在`~/.local/share/ctxkeeper/`，无网络调用或凭证请求，但存在少量实现BUG和安装/作用域不一致问题。
评估建议
Ctxkeeper如其所述：一个本地CLI日志器，存储时间戳日志，支持搜索和导出。使用前注意：（1）自行review或运行脚本；（2）避免记录敏感信息；（3）导出器有少量BUG；（4）考虑在隔离环境中运行。...详细分析 ▾
✓ 用途与能力
Name/description (manage conversation context, saving/loading/pruning) matches the included script's behavior: timestamped category logs, search, stats, export, recent. No unrelated credentials, binaries, or services are requested.
ℹ 指令范围
SKILL.md and scripts confine activity to the user's data directory (~/.local/share/ctxkeeper) and only read/write the log files there. They do not reference other system config, network endpoints, or unrelated env vars. Note: the SKILL.md presents a CLI named 'ctxkeeper' but the repo contains scripts/script.sh without an explicit install step or wrapper; this is a mild inconsistency (the script exists but there is no automated install to PATH).
ℹ 安装机制
No install spec (instruction-only) — lowest install risk. However, a shell script is included in the package; there are no instructions to install it to PATH. That is not dangerous per se, but you may need to run or install the script manually.
✓ 凭证需求
The skill requests no environment variables, credentials, or external config. The script only uses HOME to determine the data directory and standard shell utilities; this is proportionate to a local logging tool.
✓ 持久化与权限
always is false and model invocation is not disabled (normal). The skill does not request permanent elevated privileges or modify other skills or system-wide settings. It creates and uses its own data directory only.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.0.02026/3/19
发布v2.0.0
● 无害
安装命令 点击复制
官方npx clawhub@latest install ctxkeeper
镜像加速npx clawhub@latest install ctxkeeper --registry https://cn.clawhub-mirror.com
技能文档
一套用于记录、追踪和管理多类别操作条目的工具包。每个命令记录时间戳条目到专用日志文件，支持后期审查、搜索和导出。数据存储在~/.local/share/ctxkeeper/
命令
| 命令 | 描述 |
|---|---|
run <输入> | 记录运行条目。无参数时显示最近运行条目。 |
check <输入> | 记录检查条目。无参数时显示最近检查条目。 |
| ... | ... |
需求
- Bash 4+
使用场景
- 追踪时间上的上下文变化、运行和检查
- 保持跨类别操作活动的结构化日志
- 搜索历史条目
- 导出日志数据
- 通过统计和最近命令监控活动
示例
# 记录运行条目
ctxkeeper run "部署API v2.3到预发布环境"
# 搜索所有日志
ctxkeeper search "预发布环境"
# 查看统计
ctxkeeper stats
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制