Viking Memory

OpenViking 长期记忆系统。用于语义检索用户偏好、历史对话、重要信息等。当需要召回用户之前提到的信息、查找相关上下文时使用此 Skill。

This skill communicates only with a local OpenViking service on 127.0.0.1:18790 and asks for no external credentials, so the main risk is privacy: the agent (or you) may store conversation content into your local memory store. Before installing, confirm you trust the local OpenViking instance and that it is bound to localhost (not exposed externally). If you are uncomfortable with automatic saving of chat content, either disable autonomous invocation for this skill in your agent settings or avoid using the 'auto-save' behavior; you can still call search/add/read manually. The included index.js is short and readable — review it if you want to confirm behavior.

Type: OpenClaw Skill Name: viking-memory Version: 1.0.0 The skill interacts with a local service (`http://127.0.0.1:18790`) via HTTP POST requests, as seen in `index.js`. Specifically, the `listMemoriesHandler` calls the `/api/v1/fs/ls` endpoint, passing a user-controlled `path` parameter directly. While the skill itself only makes an HTTP request, this design exposes a potential vulnerability in the backend `OpenViking` service. If the `OpenViking` service's `/api/v1/fs/ls` endpoint is susceptible to path traversal or command injection via the `path` parameter, an attacker could potentially exploit this through the skill to access or manipulate local files on the system running the `OpenViking` service. This represents a risky capability, even without clear malicious intent from the skill's code itself.