Openclaw Skills Smart Agent Memory

跨平台 Agent 长期记忆系统。分层上下文供给 + 温度模型 + Skill经验记忆 + 结构化存储 + 自动归档。三层存储：Markdown（人可读，QMD 可搜索）+ JSON（结构化）+ SQLite/FTS5（高性能全文搜索）。纯 Node.js 原生模块，零外部依赖。

This package appears to be a coherent local memory engine: it only needs Node and read/write access to your OpenClaw workspace. Before installing or enabling it: 1) Confirm you trust the source (homepage unknown and embedded metadata/owner/version have small mismatches). 2) Be aware it will create and modify files in ~/.openclaw/workspace/memory and can generate SKILL.md templates under your skills directory (the 'extract' command); if you run that, inspect generated SKILL.md files before enabling them. 3) The CLI optionally calls an external 'qmd' binary if present — this is optional but not declared in requires.bins. 4) IDs are generated with a simple timestamp+random approach (not cryptographically strong) — fine for local usage but worth noting. 5) Recommended safe practices: back up any existing memory directory, run the CLI in a sandbox or non‑privileged account to validate behavior, and review/scan the package code if you have sensitive data. Overall the package is internally consistent with its stated purpose, but do the brief due diligence above because the source and packaging metadata are inconsistent.

Type: OpenClaw Skill Name: smart-agent-memory-cn Version: 2.1.1 The smart-agent-memory-cn skill is a robust memory management system for OpenClaw agents, featuring dual-layer storage (Markdown for human readability and JSON/SQLite for structured querying). It implements a temperature model for data aging (hot/warm/cold), automated garbage collection, and specific optimizations for Chinese text search (addressing SQLite FTS5 tokenization issues). The code relies on native Node.js modules and lacks any indicators of data exfiltration, malicious execution, or unauthorized persistence. While the 'extract' command in scripts/memory-cli.js contains a minor path traversal vulnerability when creating new skill directories, it is functionally aligned with the stated purpose of converting lessons into reusable templates and does not exhibit malicious intent.