Claw Memory Guardian

自动保存、备份和恢复OpenClaw会话记忆，防止任务中断和信息丢失，支持语义搜索与项目时间线管理。

Install only if you are comfortable with long-lived memory files, local backups, and Git commits in your OpenClaw workspace. Do not store secrets, regulated data, or customer financial/contract details unless you have authorization and a retention plan. Avoid running memory/auto_save.sh in the background unless you know how to stop it, and review Git status before sharing or pushing the workspace repository.

Type: OpenClaw Skill Name: claw-memory-guardian Version: 1.0.1 The skill is classified as suspicious due to its use of powerful system capabilities, specifically the creation and execution of a persistent `auto_save.sh` shell script in the user's workspace (`index.js`). While the current hardcoded content of this script is benign (creating daily memory files and updating JSON timestamps), the mechanism of writing an executable, continuously running script (via `while true; do ... sleep ...; done`) represents a significant persistence capability. This, combined with extensive file system operations (`fs-extra`) and Git version control (`simple-git`) within the user's `OPENCLAW_WORKSPACE`, creates a substantial attack surface. Although no clear malicious intent (e.g., data exfiltration, unauthorized network calls, or explicit prompt injection for harmful actions) is observed in the current code or documentation (`SKILL.md`, `README.md`), these capabilities could be exploited if other vulnerabilities were present or in future iterations, making it a high-risk component.