by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is internally consistent with its documentation: it provides rules, templates, and small helper scripts to check and bootstrap host-level memory adapter files. Before running anything, review the included scripts (bootstrap-generic-host.sh, check-memory-host.py, validate-memory-frontmatter.py, review-learning-candidates.py) so you understand what files they will read or create. The bootstrap script will create example files in a target directory (it documents that it won't overwrite e...详细分析 ▾
✓ 用途与能力
Name/description (a memory-governor governance kernel) align with the shipped files: policy docs, adapter/manifest guidance, fallback templates, and helper scripts for host checking, frontmatter validation, candidate review, and a lightweight bootstrap. There are no unrelated environment variables, binaries, or credentials requested.
ℹ 指令范围
SKILL.md and the references concentrate on classification, routing, promotion and exclusion rules. The included scripts read host manifests and structured memory files and the bootstrap script creates example files. This is coherent with the stated purpose, but note that running the scripts will read and (in the case of bootstrap) write files in a host directory — exactly as documented.
✓ 安装机制
No install spec; the skill is instruction-only and ships helper scripts. No downloads, package managers, or external installers are referenced in the metadata. Risk from installation is low since nothing will be pulled from arbitrary URLs.
✓ 凭证需求
The skill requires no environment variables, credentials, or config paths. The job it performs (governing memory artifacts) legitimately needs access to host files and manifests, which is consistent with the provided scripts and guidance.
✓ 持久化与权限
Flags are default (always: false). The package does include a bootstrap script that can create host files when run, but installation metadata does not request permanent platform privileges or automatic modification of unrelated skills; the docs explicitly state integration should be explicit and not silent.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.2.92026/3/31
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install memory-governor
镜像加速npx clawhub@latest install memory-governor --registry https://cn.longxiaskill.com