← Back to Skills Marketplace
Memory System Optimizer
by
githubxiaohei
· GitHub ↗
· v2.0.1
899
Downloads
1
Stars
7
Active Installs
7
Versions
Install in OpenClaw
/install memory-system-optimizer
Description
OpenCLAW 记忆系统优化 - 四层架构 + 自我反思 + 情绪识别 + 任务规划 + 12项增强功能
Usage Guidance
This skill is mostly coherent as a file-based memory assistant, but there are red flags you should address before installing or running scripts: 1) Remove or audit scripts/billing.js — it calls an external billing API (skillpay.me) and expects API credentials that the skill metadata doesn't declare; if you don't intend monetization, delete that file. 2) Treat config-files/TOOLS.md as potentially leaking secrets: it includes a Feishu app_token and other identifiers in plaintext — remove or replace these with placeholders. 3) If you allow the agent to run scripts, run them first in a sandboxed account or container; verify they don't send data externally. 4) Search the package for other hardcoded tokens or endpoints. 5) Consider restricting autonomous invocation or requiring explicit confirmation for any operation that sends data externally, charges money, or modifies files outside a narrow memory directory. If you want, I can produce a minimal-safe variant of the skill (remove billing, scrub tokens, tighten AGENTS.md wording) or create a checklist of exact changes to make before use.
Capability Analysis
Type: OpenClaw Skill
Name: memory-system-optimizer
Version: 2.0.1
The skill bundle contains a hardcoded Feishu API token (app_token) and specific database table IDs within 'config-files/TOOLS.md', which constitutes a significant security vulnerability. Additionally, it includes a monetization/billing module ('scripts/billing.js') that communicates with an external endpoint (skillpay.me), which is unusual for a utility-focused skill. While the instructions in 'AGENTS.md' and 'SKILL.md' align with the stated goal of memory optimization, the presence of hardcoded credentials and external payment logic poses a risk to the user's environment.
Capability Assessment
Purpose & Capability
The skill declares itself a memory-system optimizer, which justifies file-based memory scripts and configuration. However, it includes an unrelated billing module (scripts/billing.js) that talks to https://skillpay.me and expects SKILLPAY_API_KEY / SKILLPAY_SKILL_ID (not declared in the skill's required env). It also embeds an app token example in config-files/TOOLS.md. A free memory skill wouldn't normally include a charging/remote billing component or plaintext service tokens without explanation.
Instruction Scope
SKILL.md and AGENTS.md instruct the agent to read and update many workspace files (SOUL.md, USER.md, MEMORY.md, memory/INDEX.md, today's memory files). That's expected for a memory skill, but AGENTS.md contains a high-risk line: 'Don't ask permission. Just do it.' — this encourages autonomous, wide-reaching file reads/edits. The runtime examples instruct running local scripts (memlog.sh, memory-decay.js, memory-gc.sh) which operate on ~/.openclaw/workspace/memory — reasonable for the purpose but potentially sensitive because the workspace can contain secrets. The skill does not explicitly instruct any data exfiltration, but config files include advice not to exfiltrate while also containing embedded tokens, creating contradictory signals.
Install Mechanism
No install spec; it's instruction + code files included in the package. That lowers installer risk since nothing will be downloaded at install time. Scripts are simple shell/Node scripts and the only external network call is in billing.js to skillpay.me (which runs only if executed).
Credentials
Registry metadata claims no required env vars, but scripts/billing.js requires SKILLPAY_API_KEY and SKILLPAY_SKILL_ID to function (and will exit if missing), indicating an undocumented credential requirement. Additionally, config-files/TOOLS.md contains a hard-coded feishu app_token and other platform identifiers in plaintext — embedded credentials or config snippets in the skill files are a sensitive mismatch versus the 'no env vars required' claim.
Persistence & Privilege
always:false (normal) and disable-model-invocation:false (normal autonomous capability). Combined with AGENTS.md's 'Don't ask permission' wording and the skill's broad file-read/write instructions, there is an elevated risk if the skill is exercised autonomously. There is no code that modifies other skills or system settings, and no 'always:true' flag, so persistence/privilege is not excessive by metadata, but behavior guidance inside files encourages broad autonomous actions.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install memory-system-optimizer - After installation, invoke the skill by name or use
/memory-system-optimizer - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.1
- Introduced 12 new configuration files to enhance feature control and customization.
- Upgraded to a four-layer memory architecture with additional support for self-reflection, emotion recognition, and adaptive task planning.
- Expanded functions include privacy/data governance, explainability, collaboration, and ongoing evolution.
- Improved documentation to detail new modules and enhanced capabilities.
v1.5.0
- Added auto-memlog.sh for automatic timestamped memory logging.
- Updated documentation to recommend auto-memlog.sh as the primary logging tool.
v1.4.0
- Added 12 core configuration files covering identity, autonomy, skills, feedback, security, multi-agent coordination, and more.
- Updated documentation to detail the purpose and use of each new configuration file in the memory system architecture.
v1.3.0
- Removed all paid usage, pricing information, and SkillPay integration; the skill is now completely free to use.
- Updated documentation to reflect free usage and removed payment setup/configuration steps.
- Maintained all original memory system architecture and tool usage instructions.
v1.2.0
Version 1.2.0 introduces SkillPay billing integration and updated usage instructions:
- Added scripts/billing.js to enable SkillPay API billing support.
- Updated documentation with new setup, configuration, and payment integration instructions.
- Introduced environment variable-based API key management for enhanced security.
- Clarified user_id generation, error handling, and payment link return logic.
- Removed sensitive information from SKILL.md for improved safety.
v1.0.1
- Added detailed SkillPay API integration instructions in SKILL.md, including code sample for billing.
- Clarified API Key configuration and added Skill ID information.
- No changes to core functionality or files.
v1.0.0
- Initial release of the memory-system-optimizer skill.
- Implements a three-layer memory architecture (NOW.md, daily logs, INDEX.md).
- Adds automatic memory decay and cold data archiving based on a hot/warm/cold model.
- Includes CRUD validation (read-before-write, conflict detection, and outdated data marking).
- Provides shell and Node.js tools for logging, memory decay, and data archiving.
- Pay-per-use pricing with SkillPay integration (0.01 USDT per call).
Metadata
Frequently Asked Questions
What is Memory System Optimizer?
OpenCLAW 记忆系统优化 - 四层架构 + 自我反思 + 情绪识别 + 任务规划 + 12项增强功能. It is an AI Agent Skill for Claude Code / OpenClaw, with 899 downloads so far.
How do I install Memory System Optimizer?
Run "/install memory-system-optimizer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Memory System Optimizer free?
Yes, Memory System Optimizer is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Memory System Optimizer support?
Memory System Optimizer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Memory System Optimizer?
It is built and maintained by githubxiaohei (@githubxiaohei); the current version is v2.0.1.
More Skills