by 安全扫描
OpenClaw
可疑
medium confidenceThe skill claims cross-platform memory aggregation and storage but provides no runtime instructions, credentials, install steps, or privacy details — the capability description is not matched by what the skill actually requests or implements.
评估建议
This skill reads like a high-level product pitch rather than an actionable integration. Before installing or trusting it, ask the developer for: (1) concrete runtime behavior — how does the skill obtain memories from other platforms and which exact APIs/endpoints are used; (2) a list of required credentials and why each is needed; (3) an install spec or source code you can inspect; (4) clear privacy, consent, retention, encryption, and deletion policies (how user memories are stored, who can acc...详细分析 ▾
⚠ 用途与能力
The description claims cross-platform memory aggregation (ChatGPT, Gemini, Claude), Supabase long-term storage, and network computations, but the skill declares no credentials, no API endpoints, and no install or connector code. Either the SKILL.md is purely informational or it is misrepresenting actionable capabilities; pulling memories across vendors would normally require explicit connectors, auth tokens, or user-provided data.
ℹ 指令范围
SKILL.md is an explanatory product/architecture description with no step-by-step runtime instructions, no commands to run, and no references to local files, environment variables, or external endpoints. That keeps execution risk low but is vague — it also claims behaviors (data aggregation, real-time evolution) without saying how those actions would be performed, what data is accessed, or how user consent is obtained.
✓ 安装机制
No install spec and no code files (instruction-only). This minimizes immediate execution/install risk because nothing is written to disk or fetched automatically by an installer.
⚠ 凭证需求
The skill requests no environment variables or credentials despite claiming to integrate with multiple AI platforms and Supabase. Real integrations normally require API keys, tokens, or user data exports; the absence of any declared credentials or config is disproportionate to the stated functionality and raises questions about how data access would actually occur.
✓ 持久化与权限
The skill does not request always-on presence and has no install steps that modify agent or system configuration. There is no indication it would persist or escalate privileges on its own.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/3/11
Initial — social memory network for Echo ecosystem
● 无害
安装命令
点击复制官方npx clawhub@latest install memory-network
镜像加速npx clawhub@latest install memory-network --registry https://cn.longxiaskill.com镜像同步中