← Back to Skills Marketplace
377
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install openclaw-scribe
Description
Autonomous session scribe — reads today's OpenClaw session logs, extracts decisions, preferences, framework sentences, and project updates, then writes a str...
Usage Guidance
What to check before installing:
- Review the two included Python scripts (scripts/scribe.py and scripts/setup-cron.py) yourself — they are the code that will run.
- If you enable automation, setup-cron will use your OpenClaw gateway token to register a nightly job that runs the scribe script; only run setup-cron if you trust the repository and the gateway token's scope.
- The scribe script sends extracted conversation text to https://openrouter.ai (OpenRouter) using an API key read from env or ~/.openclaw/openclaw.json. If you have privacy concerns, run scribe.py manually first and/or set SCRIBE_MODEL/OPENROUTER_API_KEY to a provider you trust or leave it unset to avoid network calls.
- Run the script manually (python3 scripts/scribe.py) on a small sample day to verify outputs and ensure it only reads the intended session directory and writes to a dedicated memory folder.
- If you do not want automatic scheduling, skip setup-cron and instead use a system cron or manual runs that you control.
- Backup or inspect memory/ and MEMORY.md after first runs to confirm no sensitive tokens or unexpected content are being written.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-scribe
Version: 1.0.1
The skill is classified as suspicious due to the use of prompt injection in `scripts/setup-cron.py` to instruct the OpenClaw agent to execute a local script. While this is for the skill's intended self-orchestration and not overtly malicious, it leverages a direct prompt injection vector (`payload.message`) which represents a significant vulnerability if the prompt were to be manipulated. Additionally, `scripts/scribe.py` uses `subprocess.run` with `curl` for external API calls, which, while seemingly handled safely in this instance, is a less robust and potentially risky method compared to dedicated HTTP libraries, contributing to the 'suspicious' classification as a risky capability.
Capability Assessment
Purpose & Capability
Name/description match what the files do: scripts scan ~/.openclaw/agents/main/sessions, filter user messages, call an LLM (OpenRouter) and write structured memory files to the workspace. The optional env vars and gateway interactions are coherent with the advertised cron registration and LLM usage.
Instruction Scope
SKILL.md and README instruct only to copy the skill, run setup-cron (optional) or run scribe.py manually. Runtime instructions reference session JSONL files, the OpenClaw config for API keys, and writing memory files — all within the stated scope. There are no instructions to read unrelated system paths or exfiltrate data to unexpected endpoints.
Install Mechanism
No install spec or external downloads; the skill is instruction-only with included Python scripts. No archives or remote code pulls—low install risk.
Credentials
The scripts read an OpenRouter API key and (for cron setup) an OpenClaw gateway token from ~/.openclaw/openclaw.json or environment variables. These credentials are appropriate for the tasks (calling OpenRouter and registering a cron job) but are sensitive: the skill will send conversation text to openrouter.ai and will use the gateway token to register jobs. The number and type of credentials requested are proportional, but users should be aware these are required for full automation.
Persistence & Privilege
The skill is not 'always' enabled. The optional setup-cron registers a nightly job via the OpenClaw gateway API which grants automated periodic runs—this matches the skill's purpose. Granting the gateway token to this script enables it to create/modify cron jobs; ensure you trust the code before running setup-cron.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-scribe - After installation, invoke the skill by name or use
/openclaw-scribe - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Fix setup-cron.py: read token from gateway.auth.token, Python 3.9 compat
v1.0.0
Initial release — autonomous session memory extractor for OpenClaw
Metadata
Frequently Asked Questions
What is Scribe?
Autonomous session scribe — reads today's OpenClaw session logs, extracts decisions, preferences, framework sentences, and project updates, then writes a str... It is an AI Agent Skill for Claude Code / OpenClaw, with 377 downloads so far.
How do I install Scribe?
Run "/install openclaw-scribe" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Scribe free?
Yes, Scribe is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Scribe support?
Scribe is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Scribe?
It is built and maintained by chenchen (@billc8128); the current version is v1.0.1.
More Skills