📦 Musk Neural Memory — 神经联想记忆
v1.0.0基于传播激活的联想神经记忆系统,跨会话持久存储信息,支持因果推理与矛盾检测,多层深度智能查询,打造会思考、会回忆的AI大脑。
0· 49·0 当前·0 累计
下载技能包
最后更新
2026/4/12
安全扫描
OpenClaw
可疑
medium confidenceThe skill's description (persistent, cross-session neural memory with snapshot/transplant capabilities) is not matched by any declared persistence mechanism, credentials, or install — plus metadata mismatches — so its behavior and data-handling are unclear and potentially risky.
评估建议
Key questions before installing: 1) Where are memories persisted? Ask the author for storage location (database, cloud, platform memory) and what credentials/config are required. 2) Who can read/export/delete stored memories? Request access controls, encryption-at-rest, and deletion/portability mechanisms. 3) How does autoCapture work? If you install, insist on the ability to disable automatic capture and require explicit user consent before storing PII. 4) Verify the author/packaging: metadata ...详细分析 ▾
⚠ 用途与能力
The skill claims cross-session persistent memory, snapshots, rollbacks and 'transplant' between brains, but declares no storage paths, no environment variables, and no external services. That is internally inconsistent: persistent storage or inter-project transfer normally requires a datastore, config path, or credentials. Also _meta.json contents (ownerId, slug, version/publishedAt) do not match the registry-level metadata, which suggests packaging/authoring inconsistencies.
⚠ 指令范围
SKILL.md instructs automatic capture of conversation content (nmem_auto action=process), automatic injection of context at session start, and storing decisions/errors/preferences. It does not specify where data is stored, retention, access controls, or user consent. This broad automatic capture of user text increases privacy/exfiltration risk and grants the skill scope beyond a simple recall helper.
✓ 安装机制
This is instruction-only with no install spec and no code files to write to disk, which is lower-risk from an install/execution standpoint. The regex scanner had nothing to analyze because there are no code files.
⚠ 凭证需求
The skill requests no credentials or env vars despite describing persistent, possibly cross-agent data operations (snapshots, transplant). That absence is disproportionate and unexplained. Additionally, the SKILL.md claims 'zero LLM dependency' while describing automated semantic extraction from arbitrary dialogue — in practice this often requires heavier tooling; the discrepancy is noteworthy.
⚠ 持久化与权限
Although always:false (so not force-installed), the skill's design implies long-lived storage and cross-project transfer of memories. Without details about where memories live, who can access them, and how to opt out, the persistence model is a significant privacy/privilege concern. Autonomous invocation combined with auto-capture would widen impact if implemented without safeguards.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/12
首次发布:使用传播激活的联想记忆系统
● Pending
安装命令
点击复制官方npx clawhub@latest install maske-neural-memory
镜像加速npx clawhub@latest install maske-neural-memory --registry https://cn.longxiaskill.com