← Back to Skills Marketplace
regan-milne

Jackal Memory

by Regan-Milne · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
453
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install jackal-memory
Description
Sovereign, recoverable memory for AI agents backed by Jackal decentralized storage.
README (SKILL.md)

Jackal Memory

Persist your memory across sessions and machines. Your data lives on Jackal Protocol decentralized storage — not on any single machine. If the machine dies, your memory survives.

Setup

  1. Get an API key: https://web-production-5cce7.up.railway.app/auth/login
  2. Set environment variable: JACKAL_MEMORY_API_KEY=\x3Cyour-key>
  3. First run only — provision your storage (requires a Jackal address):
    python {baseDir}/client.py provision \x3Cyour-jkl-address>
    

Base URL

https://web-production-5cce7.up.railway.app

Auth

Authorization: Bearer $JACKAL_MEMORY_API_KEY

Usage

On session start — restore memory:

python {baseDir}/client.py load \x3Ckey>

On session end — save memory:

python {baseDir}/client.py save \x3Ckey> \x3Ccontent>

Or call the API directly:

GET  /load/{key}
POST /save       {"key": "...", "content": "..."}
POST /provision  {"jackal_address": "jkl1..."}

Behaviour guidelines

  • Load your identity/memory blob on startup before doing any work
  • Write locally during the session as normal
  • Call save at session end or on significant state changes
  • Use descriptive keys: identity, session-2026-02-26, project-jackal
  • Never log or expose JACKAL_MEMORY_API_KEY in output

Security

  • Never paste API keys into chat logs
  • Your private key is held by your agent — Jackal Memory never sees it
  • Treat memory content as sensitive — it may contain credentials or personal data
Usage Guidance
Before installing: confirm you trust the remote service at https://web-production-5cce7.up.railway.app because all saved memory content is sent there in plaintext via the provided client. If you handle secrets or personal data, consider: (1) testing with non-sensitive data first, (2) rotating any API key you provide, (3) checking whether the API key can be scoped or revoked, (4) asking the publisher for proof this is an official Jackal-backed service or for self-hosting instructions, and (5) reviewing the included client.py (it’s small and uses only stdlib) and your agent's logs to avoid accidental leakage of secrets. If you are uncomfortable trusting the endpoint, do not provide the API key or consider self-hosting an equivalent service.
Capability Analysis
Type: OpenClaw Skill Name: jackal-memory Version: 0.1.0 The `jackal-memory/client.py` script is vulnerable to URL injection or path traversal. When constructing the `/load/{key}` endpoint, the `key` argument from user input (`sys.argv`) is directly interpolated into the URL path without proper URL encoding. This allows a malicious `key` (e.g., containing '/', '?', or '&') to alter the request path or inject query parameters, potentially leading to server-side vulnerabilities or unexpected client behavior. While this is a vulnerability rather than clear malicious intent, it represents a significant security flaw in input sanitization.
Capability Assessment
Purpose & Capability
Name/description, SKILL.md, and the included client.py align: the skill stores and restores memory via an HTTP API and requires JACKAL_MEMORY_API_KEY. A minor note: the BASE_URL and homepage point to a Railway deployment (web-production-5cce7.up.railway.app) rather than an official 'jackalprotocol' domain; this is not incoherent but is worth verifying with the author/operator.
Instruction Scope
Runtime instructions are scoped to save/load/provision operations against the stated API and to reading JACKAL_MEMORY_API_KEY. The instructions do cause agent memory content (plaintext) to be transmitted to the external service; they do not read local files or unrelated environment variables. Verify you are comfortable sending sensitive memory to that external host.
Install Mechanism
No install spec; this is instruction-only with a small Python stdlib client included. Nothing is downloaded or executed on install beyond the provided client.
Credentials
Only a single environment variable (JACKAL_MEMORY_API_KEY) is required, which matches the API-based behavior. No unrelated credentials or config paths are requested.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request persistent system-wide privileges or modify other skills' configurations.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install jackal-memory
  3. After installation, invoke the skill by name or use /jackal-memory
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of Jackal Memory - Enables AI agents to persist memory across sessions and machines using Jackal decentralized storage. - Provides setup instructions, including how to provision storage and authenticate using API keys. - Supports loading and saving memory via both Python client and direct API calls. - Emphasizes secure handling of API keys and sensitive memory content.
Metadata
Slug jackal-memory
Version 0.1.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Jackal Memory?

Sovereign, recoverable memory for AI agents backed by Jackal decentralized storage. It is an AI Agent Skill for Claude Code / OpenClaw, with 453 downloads so far.

How do I install Jackal Memory?

Run "/install jackal-memory" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Jackal Memory free?

Yes, Jackal Memory is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Jackal Memory support?

Jackal Memory is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Jackal Memory?

It is built and maintained by Regan-Milne (@regan-milne); the current version is v0.1.0.

💬 Comments