Memory Harness

Runtime-enforced memory harness for OpenClaw. Implements 3-stage recall (session preflight, triggered recall, pre-execution gate) with intent classification,...

What to consider before installing: - Functionality mismatch: The SKILL.md promises retrieval of pinned facts, projects, and session history, but the code contains only local placeholders and does not connect to any memory backend—don't expect it to actually fetch your stored memories without additional integration. - Broken code: intent-classifier.js contains syntax and logic errors and appears nonfunctional; the harness may fail or behave unexpectedly. Review and test that file and the whole harness in an isolated environment before trusting it in production. - Local execution: The skill runs local node scripts via child_process.execFileSync. This is normal for this kind of tool, but ensure the agent environment has Node available and verify the scripts don't get modified to perform I/O you don't expect. - No network/exfiltration observed: There are no network calls, credential requests, or environment-variable usage in the provided files — good from an exposure standpoint — but also confirms it currently cannot access remote memory stores without modification. - Recommended actions: (1) Request the maintainer/source (unknown origin) or inspect/repair intent-classifier.js; (2) add/verify integration code for your actual memory backend before enabling autonomous invocation; (3) run the harness with representative test inputs to confirm behavior and logs; (4) limit agent autonomy to manual invocation until you confirm correct, tested behavior.

Type: OpenClaw Skill Name: memory-harness Version: 1.0.0 The memory-harness skill bundle implements a multi-stage context management system for the OpenClaw agent, including intent classification and a safety gate. The code includes a security-focused component, pre-execution-gate.js, which explicitly checks for dangerous patterns like 'rm -rf' and 'eval'. While intent-classifier.js contains syntax errors and fragmented logic, there is no evidence of malicious intent, data exfiltration, or unauthorized system access.