nix-memory

Monitors and scores agent identity and memory integrity by hashing key files, tracking changes, detecting drift, and providing continuity alerts for OpenClaw...

This skill appears to do what it claims (local hashing, drift detection, scoring), but review and take precautions before installing: - Do NOT pipe unfamiliar remote scripts into bash. The quickstart instructions mention 'https://nixus.pro/memory/install.sh' — treat that domain as untrusted until you inspect its content. Prefer running the local provided setup.sh manually. - Expect the skill to read and hash many workspace Markdown files, create a .nix-memory directory, write session logs, diffs, a manifest, and an agent.json in the workspace and .well-known. If your workspace contains sensitive files or is served by a webserver, review which files will be tracked and consider a sandbox or backup first. - The skill does not request credentials or perform network exfiltration in the bundled scripts, but it can expose metadata via agent.json/.well-known/agent.json — remove or sanitize those if you do not want discovery. - If you plan to enable autonomous invocation, be mindful that the agent could run these scripts and modify files automatically; run them manually once to verify behavior before allowing autonomous runs. Actions to reduce risk: inspect the included scripts line-by-line (they're plain bash here), run setup.sh in a temporary or read-only copy of your workspace, search for any unexpected network calls, and avoid running the remote quickstart installer without auditing it first.

Type: OpenClaw Skill Name: nix-memory Version: 1.1.0 The nix-memory skill bundle is a utility designed for agent identity persistence and workspace integrity monitoring. It uses bash scripts (setup.sh, identity-hash.sh, drift-detect.sh) to generate SHA256 hashes of core identity files like SOUL.md and IDENTITY.md, tracking changes over time to calculate a 'continuity score' and detect 'mission drift.' The scripts operate strictly within the agent's workspace, performing file integrity checks and keyword analysis on the agent's own logs to ensure behavioral consistency. There is no evidence of data exfiltration, credential theft, or unauthorized remote execution; the functionality is transparently aimed at helping the agent maintain a consistent persona across sessions.