← 返回 Skills 市场
pin-alt

2026 02 10 Clawhub Clawvault 1.5.1

作者 pin-alt · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1003
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install 2026-02-10-clawhub-clawvault-1-5-1
功能描述
Structured memory system for OpenClaw agents. Context death resilience (checkpoint/recover), structured storage, Obsidian-compatible markdown, local semantic search, and session transcript repair.
使用说明 (SKILL.md)

ClawVault 🐘

An elephant never forgets. Structured memory for OpenClaw agents.

Built for OpenClaw — install via clawhub install clawvault

Install

npm install -g clawvault

Setup

# Initialize vault (creates folder structure + templates)
clawvault init ~/my-vault

# Or set env var to use existing vault
export CLAWVAULT_PATH=/path/to/memory

# Optional: shell integration (aliases + CLAWVAULT_PATH)
clawvault shell-init >> ~/.bashrc

Quick Start for New Agents

# Start your session (recover + recap + summary)
clawvault wake

# Capture and checkpoint during work
clawvault capture "TODO: Review PR tomorrow"
clawvault checkpoint --working-on "PR review" --focus "type guards"

# End your session with a handoff
clawvault sleep "PR review + type guards" --next "respond to CI" --blocked "waiting for CI"

# Health check when something feels off
clawvault doctor

Core Commands

Wake + Sleep (primary)

clawvault wake
clawvault sleep "what I was working on" --next "ship v1" --blocked "waiting for API key"

Store memories by type

# Types: fact, feeling, decision, lesson, commitment, preference, relationship, project
clawvault remember decision "Use Postgres over SQLite" --content "Need concurrent writes for multi-agent setup"
clawvault remember lesson "Context death is survivable" --content "Checkpoint before heavy work"
clawvault remember relationship "Justin Dukes" --content "Client contact at Hale Pet Door"

Quick capture to inbox

clawvault capture "TODO: Review PR tomorrow"

Search (requires qmd installed)

# Keyword search (fast)
clawvault search "client contacts"

# Semantic search (slower, more accurate)
clawvault vsearch "what did we decide about the database"

Context Death Resilience

Wake (start of session)

clawvault wake

Sleep (end of session)

clawvault sleep "what I was working on" --next "finish docs" --blocked "waiting for review"

Checkpoint (save state frequently)

clawvault checkpoint --working-on "PR review" --focus "type guards" --blocked "waiting for CI"

Recover (manual check)

clawvault recover --clear
# Shows: death time, last checkpoint, recent handoff

Handoff (manual session end)

clawvault handoff \
  --working-on "ClawVault improvements" \
  --blocked "npm token" \
  --next "publish to npm, create skill" \
  --feeling "productive"

Recap (bootstrap new session)

clawvault recap
# Shows: recent handoffs, active projects, pending commitments, lessons

Auto-linking

Wiki-link entity mentions in markdown files:

# Link all files
clawvault link --all

# Link single file
clawvault link memory/2024-01-15.md

Folder Structure

vault/
├── .clawvault/           # Internal state
│   ├── last-checkpoint.json
│   └── dirty-death.flag
├── decisions/            # Key choices with reasoning
├── lessons/              # Insights and patterns
├── people/               # One file per person
├── projects/             # Active work tracking
├── handoffs/             # Session continuity
├── inbox/                # Quick captures
└── templates/            # Document templates

Best Practices

  1. Wake at session startclawvault wake restores context
  2. Checkpoint every 10-15 min during heavy work
  3. Sleep before session endclawvault sleep captures next steps
  4. Use types — knowing WHAT you're storing helps WHERE to put it
  5. Wiki-link liberally[[person-name]] builds your knowledge graph

Checklist for AGENTS.md

## Memory Checklist
- [ ] Run `clawvault wake` at session start
- [ ] Checkpoint during heavy work
- [ ] Capture key decisions/lessons with `clawvault remember`
- [ ] Use wiki-links like `[[person-name]]`
- [ ] End with `clawvault sleep "..." --next "..." --blocked "..."`
- [ ] Run `clawvault doctor` when something feels off

Session Transcript Repair (v1.5.0+)

When the Anthropic API rejects with "unexpected tool_use_id found in tool_result blocks", use:

# See what's wrong (dry-run)
clawvault repair-session --dry-run

# Fix it
clawvault repair-session

# Repair a specific session
clawvault repair-session --session \x3Cid> --agent \x3Cagent-id>

# List available sessions
clawvault repair-session --list

What it fixes:

  • Orphaned tool_result blocks referencing non-existent tool_use IDs
  • Aborted tool calls with partial JSON
  • Broken parent chain references

Backups are created automatically (use --no-backup to skip).

Troubleshooting

  • qmd not installed — run bun install -g github:tobi/qmd or npm install -g qmd
  • No ClawVault found — run clawvault init or set CLAWVAULT_PATH
  • CLAWVAULT_PATH missing — run clawvault shell-init and add to shell rc
  • Too many orphan links — run clawvault link --orphans
  • Inbox backlog warning — process or archive inbox items
  • "unexpected tool_use_id" error — run clawvault repair-session

Integration with qmd

ClawVault uses qmd for search:

# Install qmd
bun install -g github:tobi/qmd

# Add vault as collection
qmd collection add /path/to/vault --name my-memory --mask "**/*.md"

# Update index
qmd update && qmd embed

Environment Variables

  • CLAWVAULT_PATH — Default vault path (skips auto-discovery)

Links

安全使用建议
This skill appears to do what it says: it manages a local Obsidian-style vault, requires a local qmd binary for semantic search, and repairs OpenClaw session transcripts by reading/writing files under your home directory. Before installing or enabling hooks, consider: 1) review hooks/clawvault/handler.js and any hook-related files to confirm you are comfortable with automatic checkpointing and injected recovery messages; 2) back up your OpenClaw sessions (~/.openclaw/agents) if you plan to run repair-session; 3) installing the CLI requires running npm/bun global installs (review the package source or install in an isolated environment if unsure); 4) the tool will spawn the external 'qmd' binary if present — only install qmd from sources you trust. If you want extra caution, run clawvault and repair-session with --dry-run first and use an isolated test vault before pointing it at production agent data.
功能分析
Type: OpenClaw Skill Name: 2026-02-10-clawhub-clawvault-1-5-1 Version: 1.0.0 The ClawVault skill bundle is classified as suspicious due to a prompt injection vulnerability identified in `src/commands/checkpoint.ts`. The `triggerUrgentWake` function constructs a message from user-provided `workingOn`, `focus`, and `blocked` options without sanitization, then passes this directly to `openclaw gateway wake --text`. This allows a malicious agent or user to inject arbitrary instructions into the OpenClaw agent's context during a checkpoint. While the developers have demonstrated security awareness by fixing other shell and prompt injection vulnerabilities in `hooks/clawvault/handler.js` (as noted in `CHANGELOG.md`), this specific flaw remains unaddressed. Additionally, the `SKILL.md` instructs users to install `qmd` directly from GitHub, which poses a supply chain risk by bypassing package registry security checks.
能力评估
Purpose & Capability
The name/description match the code and instructions: the package implements a local vault (create/load/store/search), qmd-based semantic search integration, shell integration, OpenClaw hook support, and session transcript repair that operates on ~/.openclaw/agents. No unrelated secrets or cloud credentials are requested.
Instruction Scope
SKILL.md directs the agent (or user) to run clawvault CLI commands that will read and modify local files: vault markdown files, the .clawvault internal state, and OpenClaw session files under the user's home directory. It also recommends installing and running external tooling (qmd) and offers a shell-init helper that appends aliases to shell rc files. These actions are in-scope for a memory/session-repair tool, but they do entail modifying other agent session files and shell configuration, so users should expect local file mutation and review hooks/handler code before enabling.
Install Mechanism
The registry entry has no automated install spec (instruction-only), but the package source/CLI is bundled in the skill. SKILL.md recommends installing via `npm install -g clawvault` and optionally `bun install -g github:tobi/qmd`. No registry-provided install script means the user must install the CLI themselves; this lowers automatic-install risk but does require executing third-party install commands.
Credentials
The skill declares no credentials and only an optional CLAWVAULT_PATH env var (documented). The code legitimately accesses local filesystem paths (vault path and ~/.openclaw sessions) and spawns the local 'qmd' binary for search. These accesses are proportional to the stated functionality and documented in SKILL.md.
Persistence & Privilege
always:false (normal). The skill can be invoked autonomously by the agent (default behavior) and provides an optional OpenClaw hook that, if installed and enabled by the user, will run on agent startup and on certain events. That hook (present as hooks/clawvault/handler.js) can inject recovery messages and auto-checkpoint behavior — expected for the feature but worth reviewing before enabling since it changes agent runtime behavior.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install 2026-02-10-clawhub-clawvault-1-5-1
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /2026-02-10-clawhub-clawvault-1-5-1 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of ClawVault v1.5.1 for OpenClaw agents. - Provides structured memory storage with context death resilience (checkpoint/recover flow). - Supports Obsidian-compatible markdown, local semantic search, and session transcript repair. - Includes commands for waking, sleeping, checkpointing, capturing, remembering by type, searching, linking, and health checks. - Features session transcript repair for fixing broken Anthropic API sessions. - Integrates with qmd for fast and semantic search within the vault.
元数据
Slug 2026-02-10-clawhub-clawvault-1-5-1
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

2026 02 10 Clawhub Clawvault 1.5.1 是什么?

Structured memory system for OpenClaw agents. Context death resilience (checkpoint/recover), structured storage, Obsidian-compatible markdown, local semantic search, and session transcript repair. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1003 次。

如何安装 2026 02 10 Clawhub Clawvault 1.5.1?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install 2026-02-10-clawhub-clawvault-1-5-1」即可一键安装,无需额外配置。

2026 02 10 Clawhub Clawvault 1.5.1 是免费的吗?

是的,2026 02 10 Clawhub Clawvault 1.5.1 完全免费(开源免费),可自由下载、安装和使用。

2026 02 10 Clawhub Clawvault 1.5.1 支持哪些平台?

2026 02 10 Clawhub Clawvault 1.5.1 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 2026 02 10 Clawhub Clawvault 1.5.1?

由 pin-alt(@pin-alt)开发并维护,当前版本 v1.0.0。

💬 留言讨论