Shared Brain

Shared persistent memory layer across multiple AI agents. Use when setting up a multi-agent workspace for the first time, when an agent discovers a permanent...

What to consider before installing: - This skill will modify your workspace: it creates memory files under ~/clawd/memory (by default), copies scripts to ~/clawd/skills/shared-brain/scripts/, and patches every agents/*/AGENTS.md and your HEARTBEAT.md. Always run sb-install.sh --dry-run first and back up AGENTS.md and HEARTBEAT.md before applying. - No network access or secrets are required by the scripts, which lowers exfiltration risk. Still, review the included scripts yourself (sb-install.sh, sb-curate.sh, sb-write.sh) so you understand the exact edits performed. - Concurrency and input validation notes: sb-write.sh appends lines to the queue without a formal lock; concurrent writers could theoretically interleave writes or produce malformed lines (this is an operational risk rather than an exfiltration risk). sb-curate.sh uses grep/regexes that treat keys as regex patterns — specially crafted keys containing regex metacharacters could cause unexpected matches or conflict behavior. Consider restricting who can run sb-write.sh or validating keys centrally. - Compatibility: sb-write.sh and sb-curate.sh use grep -P in one validation check; some systems (BSD/macOS default grep) do not support -P. Test in your environment before trusting automatic installs. - Operational security: only allow trusted agents/people to write facts to the queue; facts are promoted by heartbeat into a file read by all agents (poisoning the queue can propagate bad ground truth). Use file permissions and team processes to control who runs sb-write.sh. - If you want extra caution, install in a sandboxed workspace first to observe behavior, and keep backups of any critical AGENTS.md, HEARTBEAT.md, and existing memory files.

Type: OpenClaw Skill Name: shared-brain Version: 1.0.2 The shared-brain skill bundle implements a local persistent memory layer for AI agents via file-based queuing and curation. The scripts (sb-write.sh, sb-curate.sh, sb-install.sh) operate entirely within the local workspace (~/clawd) and include proactive security measures, such as a regex-based blacklist in sb-write.sh to prevent prompt injection and shell characters from entering the shared memory. No network activity, data exfiltration, or malicious obfuscation was detected.