Subagent Distiller

自动增量提取对话中的结构化知识，智能过滤无用信息，动态聚类主题，支持状态追踪和长期价值沉淀。

This skill appears internally coherent and implements what it claims, but take these precautions before installing/running: - Backup your memory/topics and related workspace directories (the scripts will move/archive topic files and create/overwrite cards). - Update the hard-coded paths (/home/aqukin/...) in the scripts to match your environment to avoid accidental edits in the wrong home directory. - Confirm which agent/model/process will execute the extraction tasks (extraction_tasks.json / sessions_spawn). The system will send raw conversation slices to that processor, so ensure the model/endpoint is authorized and acceptable for processing sensitive data. - Clarify the repository URL inconsistency in SKILL.md vs package.json and prefer obtaining the code from a trusted source (verify upstream repo/commit history). - Run in a test environment first (or run incremental_slice and realtime_distill in dry-run / inspect-mode) to observe outputs before adding cron jobs or using bulk_cleanup --exec. - Note: bulk_cleanup prints what would be deleted and requires --exec to perform moves, but review the printed list carefully before executing. If you want, I can list the exact files/lines that reference hard-coded paths and suggest safe edits to make the skill use a configurable workspace path.

Type: OpenClaw Skill Name: subagent-distiller Version: 3.0.1 The skill bundle contains hardcoded absolute paths to a specific user's home directory (`/home/aqukin/`) across all core Python scripts, including `bulk_cleanup.py`, `realtime_distill.py`, and `incremental_slice.py`. While the logic for scanning session logs and extracting structured knowledge appears functional and aligned with the stated purpose, the reliance on fixed, user-specific paths is a significant security risk and suggests the code was not properly generalized for public use. No clear evidence of data exfiltration or intentional malice was found, but the hardcoded environment and broad file manipulation capabilities make it suspicious.