by 安全扫描
OpenClaw
安全
high confidence技能文件和运行指令内部一致，用于本地记忆管理，不请求无关凭证或进行网络数据泄漏，但会读取和快照 OpenClaw 工作空间下的任意文件，请在使用前审查工作空间内容。
评估建议
技能如描述，进行本地记忆分层和检查点管理。使用前：（1）自行检查脚本；（2）确保工作空间无敏感文件；（3）了解可选工具；（4）考虑在受限环境运行或备份；（5）验证无远程端点添加。...详细分析 ▾
✓ 用途与能力
Name/description (memory optimization, WAL, tiering, context budgeting) match the included scripts and SKILL.md. The scripts only create and manage files under the OpenClaw workspace (SESSION-STATE.md, .learnings/, memory/ etc.), and optionally call local tools like jq or the openclaw CLI. Nothing required by the skill (no env vars, no credentials, no external binaries) is inconsistent with its stated purpose.
ℹ 指令范围
Runtime instructions direct the agent/operator to run init.sh, detect.sh, search.sh, tiering.sh, and checkpoint.sh which read, write, copy and archive workspace files. This is expected for a memory manager, but the scripts aggregate and snapshot content (e.g., copying SESSION-STATE.md into snapshots), so they will capture any text present in your workspace files. There are no network endpoints or remote uploads in the scripts, but the scope of files touched is broad within the workspace.
✓ 安装机制
No install spec or external downloads are used. The skill is instruction-plus-scripts only; all logic is present in the included shell scripts. This is lower risk than remote installers. The scripts do rely optionally on local utilities (jq, openclaw CLI) if present.
ℹ 凭证需求
The skill declares no required environment variables or credentials. It does respect an OPENCLAW_WORKSPACE variable if set and otherwise uses $HOME/.openclaw/workspace. While that is proportional to its purpose, the scripts will read and archive files under that workspace — which could include tokens or secrets if you store them there. No unrelated external credentials are requested.
✓ 持久化与权限
The skill does not request always:true, does not modify other skills or system-wide configs, and only creates files under the workspace path. Its persistence is limited to workspace files it creates/updates (.proactive-memory-state.json, SESSION-STATE.md, memory/ and .learnings/).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/24
v1.0.1：添加全面中文文档支持，SKILL.md 双语支持，包括完整中文翻译和示例。
● Pending
安装命令
点击复制官方npx clawhub@latest install proactive-memory-agent
镜像加速npx clawhub@latest install proactive-memory-agent --registry https://cn.longxiaskill.com镜像同步中
技能文档
（由于原始内容过长，以下仅提供部分翻译，保留原始 Markdown 格式和代码块）