Memory Treasure

Complete memory management tool to activate, organize, and back up your AI’s memory folder; must be paired with memory-key for full function.

This skill's goal (organize and back up an AI 'memory' folder) is plausible, but several inconsistencies merit caution: 1) The description says it needs a "memory-key" but no credential or env var is declared — ask the author how that key is supplied and why it was omitted. 2) The instructions tell the agent to load files every startup and to archive raw conversation logs and an 'Important files' folder that explicitly mentions 'Keys' — verify exactly which filesystem paths the skill will read/write and confirm sensitive files (API keys, system secrets) will be excluded or encrypted. 3) The SKILL.md expects cron jobs and automated backups but there is no install spec to create those jobs; ask how scheduled archiving and backups are implemented and whether you must opt in. 4) The manifest metadata (owner/version) mismatches the registry listing — request clarification or a signed/consistent manifest. Recommend: do not install or grant filesystem access until the author clarifies how the memory-key is provided, which paths are accessed, whether secrets are excluded/encrypted, and how scheduling/backups are implemented. If you proceed, limit the skill to a dedicated memory directory (not system or home dirs with keys), audit the files it will read/write, and prefer an explicit credential-binding mechanism rather than implicit or undocumented access.

Type: OpenClaw Skill Name: memory-treasure Version: 4.3.1 The skill bundle defines a memory management framework that explicitly instructs the AI agent to store and manage sensitive data, including 'Keys' (credentials), within its directory structure ('重要文件/'). While the intent appears to be organizational, the design encourages storing secrets in plaintext and includes a 'backup' command to package these files, creating a high risk of credential exposure or exfiltration. This constitutes a significant security vulnerability in the skill's architecture (SKILL.md).