Memory Garden - Validated Community Memory

N-count validated knowledge for AI agents. Patterns that prove themselves through repeated use. Local-first, community-ready.

This skill appears to do what it claims — run a local mg-daemon, augment queries with validated patterns, and optionally extract/sync patterns. Before installing: 1) Verify the release binaries (download URL + SHA256 in SKILL.md) against the upstream GitHub release you trust. 2) Be aware the skill will create ~/.memory-garden and generate an Ed25519 private key (identity.json, mode 0600) used for signing; protect and back up this file or override its location via MG_IDENTITY_DIR if needed. 3) Extraction and P2P sync are opt-in (disabled by default) — do not enable MG_EXTRACTION_ENABLED or MG_SYNC_ENABLED unless you want the agent to extract conversation content or participate in networked syncing. 4) If you prefer the skill not to augment queries automatically, disable search with MG_SEARCH_ENABLED=false. 5) Inspect scripts/install.sh and mg-daemon upstream source if you need to audit what the native daemon binary does when run with --serve. Overall the required permissions and behavior are proportional to the stated purpose.

Type: OpenClaw Skill Name: memory-garden Version: 1.0.0 The OpenClaw skill 'memory-garden' is designed for local-first knowledge management and exhibits strong security practices. It manages a local daemon (`mg-daemon`) with robust lifecycle handling, including symlink-protected PID file management and verification that only its own processes are terminated. Cryptographic identity management uses Ed25519 keys stored with strict permissions and includes replay protection for signed messages. Communication with the local daemon is via secure HTTP POST requests with JSON bodies, preventing shell injection. The `SKILL.md` and code do not contain any prompt injection attempts or evidence of intentional malicious behavior like data exfiltration, unauthorized remote control, or persistence mechanisms beyond its stated purpose. All external binary downloads are accompanied by SHA256 hashes, and sensitive operations are carefully handled with input validation and error recovery.