📦 Unified — 统一
v5.2.5Memory 提供分层、原子化且高性能的内存管理系统，具备结构化召回、向量搜索、智能去重、压缩与生命周期管理等功能。
0· 19·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
high confidenceThe skill appears to implement the described unified-memory system, but there are notable mismatches and risk signals (prompt-injection patterns in SKILL.md, remote install instructions, and server/cloud/plugin code) that merit manual review before installing or running.
评估建议
This package looks like a full-featured memory system and the codebase largely matches its description, but there are several red flags you should address before installing or running it:
- Do not run any remote install command (e.g., curl ... | bash) from this project without auditing the script. Prefer installing from a vetted GitHub release or building locally after review.
- SKILL.md triggered prompt-injection patterns. Open SKILL.md and search for lines that attempt to override or instruct...详细分析 ▾
ℹ 用途与能力
Name/description match the included codebase: many storage, vector, server, plugin and cloud integration modules are present and consistent with a memory system. However the registry metadata declares no required env vars/binaries while the code includes web servers, cloud/collab integration and plugin hooks that in practice often require configuration/credentials — this is a proportionality/visibility gap (the skill asks for nothing but contains components that normally need config).
⚠ 指令范围
SKILL.md and README include runtime commands and examples that advise running install/deploy scripts (e.g., './deploy-atomic-fixes.sh', 'npm run deploy', and in docs a 'curl ... | bash' install flow). The pre-scan flagged prompt-injection patterns in SKILL.md (ignore-previous-instructions, system-prompt-override). The instructions reference running local server components and scripts that could start HTTP endpoints, modify disk (fsync/atomic renames), or execute arbitrary scripts — broader scope than a pure read-only documentation skill and worth caution.
⚠ 安装机制
Registry lists no install spec, but repository/docs show and reference remote install scripts (curl raw.githubusercontent.com | bash) and many executable scripts in the package. If users follow those instructions they'd run code fetched from the network. The lack of a declared, auditable install mechanism in the registry plus remote install instructions is a risk.
ℹ 凭证需求
The skill declares no required env vars/primary credential, yet code contains cloud, multi-tenant, and integration modules (collab/cloud, integrations/git_tools, v4 storage gateway) that commonly require credentials and network access. Absence of declared credentials reduces transparency — additional config may be expected at runtime but not surfaced to the registry metadata.
⚠ 持久化与权限
always:false (good). But the package contains server components (REST/MCP/HTTP/WebUI) and a plugin system with hot-reload and lifecycle hooks which, if started, can accept network connections and execute third‑party plugin code. That increases blast radius if the skill is run; the skill does not explicitly document network/port bindings in the registry metadata.
⚠ src/git_notes.js:55
Shell command execution detected (child_process).
⚠ src/index.js:814
Shell command execution detected (child_process).
⚠ src/integrations/git_manager.js:32
Shell command execution detected (child_process).
⚠ src/lessons.js:541
Shell command execution detected (child_process).
⚠ src/qmd_integration.js:41
Shell command execution detected (child_process).
⚠ src/search/qmd_backend.js:26
Shell command execution detected (child_process).
⚠ src/storage_lock.js:34
Shell command execution detected (child_process).
⚠ src/system/sandbox.js:147
Shell command execution detected (child_process).
⚠ src/tools/git_notes.js:36
Shell command execution detected (child_process).
⚠ src/tools/qmd_search.js:77
Shell command execution detected (child_process).
⚠ src/webui/dashboard.js:212
Shell command execution detected (child_process).
⚠ src/agents/agent_memory.js:40
Environment variable access combined with network send.
⚠ src/agents/memory_agent.js:21
Environment variable access combined with network send.
⚠ src/cache_semantic.js:20
Environment variable access combined with network send.
⚠ src/collab/cloud.js:16
Environment variable access combined with network send.
⚠ src/collab/peer_registry.js:13
Environment variable access combined with network send.
⚠ src/collab/push.js:30
Environment variable access combined with network send.
⚠ src/config.js:10
Environment variable access combined with network send.
⚠ src/consolidate/reconsolidation.js:17
Environment variable access combined with network send.
⚠ src/core/association.js:15
Environment variable access combined with network send.
⚠ src/core/audio.js:19
Environment variable access combined with network send.
⚠ src/core/vision.js:19
Environment variable access combined with network send.
⚠ src/episode_summarizer.js:15
Environment variable access combined with network send.
⚠ src/graph/knowledge_merger.js:33
Environment variable access combined with network send.
⚠ src/index.js:809
Environment variable access combined with network send.
⚠ src/rerank.js:17
Environment variable access combined with network send.
⚠ src/rerank/cross_encoder.js:14
Environment variable access combined with network send.
⚠ src/sync_incremental.js:21
Environment variable access combined with network send.
⚠ src/system/llm_provider.js:61
Environment variable access combined with network send.
⚠ src/system/local_llm.js:33
Environment variable access combined with network send.
⚠ src/tools/concurrent_search.js:22
Environment variable access combined with network send.
⚠ src/tools/inference.js:15
Environment variable access combined with network send.
⚠ src/tools/qa.js:10
Environment variable access combined with network send.
⚠ src/tools/qmd_search.js:64
Environment variable access combined with network send.
⚠ src/tools/recommend.js:16
Environment variable access combined with network send.
⚠ src/tools/rerank.js:12
Environment variable access combined with network send.
⚠ src/tools/summary.js:15
Environment variable access combined with network send.
⚠ src/unified_memory.js:39
Environment variable access combined with network send.
⚠ src/vector_lancedb.js:23
Environment variable access combined with network send.
⚠ src/agents/agent_memory.js:222
File read combined with network send (possible exfiltration).
⚠ src/agents/memory_agent.js:12
File read combined with network send (possible exfiltration).
⚠ src/api/rest_server.js:110
File read combined with network send (possible exfiltration).
⚠ src/api/simple_server.js:96
File read combined with network send (possible exfiltration).
⚠ src/cache_semantic.js:13
File read combined with network send (possible exfiltration).
⚠ src/collab/cloud.js:12
File read combined with network send (possible exfiltration).
⚠ src/collab/peer_registry.js:10
File read combined with network send (possible exfiltration).
⚠ src/collab/push.js:13
File read combined with network send (possible exfiltration).
⚠ src/config.js:5
File read combined with network send (possible exfiltration).
⚠ src/core/association.js:12
File read combined with network send (possible exfiltration).
⚠ src/core/audio.js:12
File read combined with network send (possible exfiltration).
⚠ src/core/vision.js:12
File read combined with network send (possible exfiltration).
⚠ src/graph/knowledge_merger.js:140
File read combined with network send (possible exfiltration).
⚠ src/index.js:1696
File read combined with network send (possible exfiltration).
⚠ src/sync_incremental.js:14
File read combined with network send (possible exfiltration).
⚠ src/system/local_llm.js:24
File read combined with network send (possible exfiltration).
⚠ src/tools/autostore.js:259
File read combined with network send (possible exfiltration).
⚠ src/tools/concurrent_search.js:13
File read combined with network send (possible exfiltration).
⚠ src/tools/inference.js:12
File read combined with network send (possible exfiltration).
⚠ src/tools/qmd_search.js:13
File read combined with network send (possible exfiltration).
⚠ src/tools/recommend.js:13
File read combined with network send (possible exfiltration).
⚠ src/tools/rerank.js:9
File read combined with network send (possible exfiltration).
⚠ src/tools/summary.js:12
File read combined with network send (possible exfiltration).
⚠ src/unified_memory.js:281
File read combined with network send (possible exfiltration).
⚠ src/webui/dashboard.js:18
File read combined with network send (possible exfiltration).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv5.2.52026/4/20
v5.2.5 - Minimal package: Complete documentation system, performance optimization, WAL protocol, evidence chain, auto-organization, transcript-first architecture. Size: 4.3MB, Files: 400.
● 无害
安装命令
点击复制官方npx clawhub@latest install unified-memory-minimal
镜像加速npx clawhub@latest install unified-memory-minimal --registry https://cn.longxiaskill.com