Universal LYGO Living Memory Library upgrade. Provides a strict, low-noise memory index (max 20 files), fragile tagging, and audit/compression workflows so Champions can retain continuity and verify integrity via LYGO-MINT. Pure advisor; not a controller.

What to check before installing or running: - Review references/core_files_index.json carefully. Ensure none of the paths are absolute or include upward traversal (../) that would let the script read files outside a safe directory. - Do not run audit_library.py with its default settings in a workspace containing secrets. Instead pass --base to explicitly point to a sandboxed folder containing only the files you want audited. - Note that compression and minting are not implemented in this package; the SKILL.md points to an external verifier you must vet separately before installing or running it. - Run scripts/self_check.py first to confirm the bundle is internally consistent. Inspect the produced state/living_memory_audit_report.json after a dry run to see what was read and written. - If you want to be conservative: run the skill only in an isolated environment (container or throwaway workspace) and disable autonomous invocation for this skill until you have audited it fully. - If you lack the skills to audit file path logic, avoid installing an untrusted instruction-only skill that reads the filesystem, or ask someone with developer/security experience to review the index and scripts.

Type: OpenClaw Skill Name: lygo-universal-living-memory-library Version: 1.1.0 The skill bundle is primarily documentation and Python scripts for auditing local files. The `audit_library.py` script reads files specified in `references/core_files_index.json` (relative to a configurable base path, defaulting to the workspace root) and writes a local report. It performs no network operations, no malicious execution (e.g., `eval`/`exec` of untrusted input), and no attempts at persistence or data exfiltration. While `SKILL.md` provides high-level instructions for tasks like 'Compress these logs' and 'Mint the Master Archive', the skill bundle itself does not contain executable components for these actions, nor does it instruct the agent to perform any malicious operations. The skill explicitly states it is 'Pure advisor; not a controller', which is consistent with the provided code.