← Back to Skills Marketplace
regan-milne

Jackal Skill

by Regan-Milne · GitHub ↗ · v1.0.1
cross-platform ✓ Security Clean
349
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install jackal-skill
Description
Sovereign, recoverable memory for AI agents backed by Jackal decentralized storage.
README (SKILL.md)

Jackal Memory

Persist your memory across sessions and machines. Your data lives on Jackal Protocol decentralized storage — not on any single machine. If the machine dies, your memory survives.

All content is encrypted client-side with AES-256-GCM before leaving your machine. The server never sees plaintext.

Setup

  1. Get an API key: https://web-production-5cce7.up.railway.app/auth/login
  2. Set environment variable: JACKAL_MEMORY_API_KEY=\x3Cyour-key>
  3. Install dependency: pip install cryptography
  4. On first save, an encryption key is auto-generated and saved to ~/.config/jackal-memory/key. To use the same key on other machines, copy it:
    python {baseDir}/jackal-memory/client.py keygen
    
    Set JACKAL_MEMORY_ENCRYPTION_KEY=\x3Cyour-key> — this takes priority over the key file.

Base URL

https://web-production-5cce7.up.railway.app

Auth

Authorization: Bearer $JACKAL_MEMORY_API_KEY

Usage

On session start — restore memory:

python {baseDir}/jackal-memory/client.py load \x3Ckey>

On session end — save memory:

python {baseDir}/jackal-memory/client.py save \x3Ckey> \x3Ccontent>

Check storage usage:

python {baseDir}/jackal-memory/client.py usage

Or call the API directly:

GET  /load/{key}
POST /save       {"key": "...", "content": "..."}
GET  /usage

Behaviour guidelines

  • Load your identity/memory blob on startup before doing any work
  • Write locally during the session as normal
  • Call save at session end or on significant state changes
  • Use descriptive keys: identity, session-2026-02-26, project-jackal
  • Never log or expose JACKAL_MEMORY_API_KEY in output
  • Never log or expose JACKAL_MEMORY_ENCRYPTION_KEY in output

Security

  • All content is encrypted before leaving your machine — the server cannot read your memories
  • Never paste API keys or encryption keys into chat logs
  • Back up your encryption key: python {baseDir}/jackal-memory/client.py keygen
  • Treat memory content as sensitive — it may contain credentials or personal data
Usage Guidance
This skill appears internally coherent, but you should verify you trust the remote service before use. Practical precautions: (1) confirm the BASE_URL/host is legitimate (the bundle points to a railway.app deployment with no other homepage or owner info); (2) treat the encryption key as highly sensitive—do not paste it into chats or public logs and be careful when copying it between machines since the client prints it and writes it to disk; (3) consider auditing the remote service or self-hosting if you plan to store sensitive secrets in memory; (4) running the client will make outbound requests to the stated URL using your API key—only proceed if you trust that endpoint.
Capability Analysis
Type: OpenClaw Skill Name: jackal-skill Version: 1.0.1 The skill provides client-side encrypted memory storage for AI agents, a legitimate and useful function. The implementation uses strong AES-256-GCM encryption with securely managed keys and standard `urllib.request` for API communication. The `SKILL.md` instructions guide the agent on proper usage and explicitly advise against logging sensitive keys, demonstrating security-conscious design rather than prompt injection. There is no evidence of intentional harmful behavior such as data exfiltration, malicious execution, persistence, or obfuscation. Potential vulnerabilities related to input handling (e.g., URL path for keys) or output processing (decrypted content to stdout) are not indicative of malicious intent within the skill itself, but rather potential weaknesses in the broader system's interaction with the skill.
Capability Assessment
Purpose & Capability
Name/description ask for a networked memory store; the skill requires a JACKAL_MEMORY_API_KEY and the client.py contacts the declared BASE_URL to save/load data. The env var and endpoints align with the stated purpose.
Instruction Scope
SKILL.md and client.py keep scope to storing and retrieving encrypted blobs. The client enforces client-side AES-256-GCM encryption before network transmission. Note: the client auto-generates and writes an encryption key to ~/.config/jackal-memory/key and prints it to stderr (one-time message); copying that key between machines as instructed can leak the key if not done carefully.
Install Mechanism
No install spec / no archive downloads. The only declared dependency is the cryptography Python package (pip install cryptography), which is appropriate for local AES-GCM encryption. The package choice and lack of external installers are proportionate.
Credentials
Only JACKAL_MEMORY_API_KEY is required (with an optional JACKAL_MEMORY_ENCRYPTION_KEY override). These env vars are directly relevant to the described service; no unrelated credentials or system paths are requested.
Persistence & Privilege
The skill is not always-loaded and can be invoked by the user. It writes its own key file under the user's ~/.config/jackal-memory directory (expected for this use) and does not request broader system or other-skill configuration access.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install jackal-skill
  3. After installation, invoke the skill by name or use /jackal-skill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Fix client path and remove obsolete provision step
Metadata
Slug jackal-skill
Version 1.0.1
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Jackal Skill?

Sovereign, recoverable memory for AI agents backed by Jackal decentralized storage. It is an AI Agent Skill for Claude Code / OpenClaw, with 349 downloads so far.

How do I install Jackal Skill?

Run "/install jackal-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Jackal Skill free?

Yes, Jackal Skill is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Jackal Skill support?

Jackal Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Jackal Skill?

It is built and maintained by Regan-Milne (@regan-milne); the current version is v1.0.1.

💬 Comments