Smart Agent Memory

跨平台 Agent 长期记忆系统。分层上下文供给 + 温度模型 + Skill经验记忆 + 结构化存储 + 自动归档。三层存储：Markdown（人可读，QMD 可搜索）+ JSON（结构化）+ SQLite/FTS5（高性能全文搜索）。纯 Node.js 原生模块，零外部依赖。

What to check before installing: - Understand and accept that this skill will write to and modify your home workspace paths (default: ~/.openclaw/workspace/memory) and — during setup — will scan and inject BOOTSTRAP.md into every ~/.openclaw/workspace* it finds. If you have private or sensitive projects in those workspaces, back them up first. - The CLI can create or append Markdown and JSON/SQLite files, archive old logs, and can auto-generate SKILL.md templates from lessons (i.e., it can create skill-like files). Decide whether you want a skill that can produce new skill artifacts or alter workspace content. - There is a metadata inconsistency: the SKILL.md advertises explicit read/write permissions but the registry metadata lists no required config paths. Confirm which is authoritative and whether you are comfortable granting those filesystem permissions. - The code may call an external binary 'qmd' if present (for hybrid search). If you do not want that binary invoked, ensure it's absent from PATH or review/modify lib/search.js. - If you plan to use it across multiple agents or teams, set governance/ownership rules for the shared memory directory to avoid noisy writes or accidental leaks across agents. - To minimize risk: run setup manually and inspect what files it writes (or run in an isolated test account/sandbox), review the memory-cli.js extract and setup implementations, and consider restricting MEMORY_DIR to a dedicated directory (set MEMORY_DIR env) before running setup. Given these intrusive but explainable capabilities (workspace-wide injection and skill extraction), the skill is coherent with its stated purpose but contains behaviors that could be surprising or risky; treat it as 'suspicious' until you verify and constrain its actions.

Type: OpenClaw Skill Name: smart-agent-memory Version: 3.0.6 The bundle implements a sophisticated long-term memory system for OpenClaw agents using SQLite and Markdown. While the 'setup' command in 'scripts/memory-cli.js' performs an intrusive action by automatically injecting bootstrap instructions into all discovered workspaces (~/.openclaw/workspace*), this behavior is transparently documented as a requirement for session continuity. The 'extract' utility in 'lib/extract.js' generates new skill templates from 'lessons' with a 'trust: low' metadata setting, demonstrating security awareness regarding generated content. No evidence of data exfiltration, unauthorized network communication, or obfuscation was found; all file operations are confined to the expected OpenClaw directory structure.