← 返回 Skills 市场
wenroudeyu-collab

Clawhub Skill

作者 wenroudeyu-collab · GitHub ↗ · v3.2.5 · MIT-0
linuxdarwinwin32 ⚠ suspicious
371
总下载
1
收藏
0
当前安装
37
版本数
在 OpenClaw 中安装
/install cc-soul
功能描述
Zero-vector AI memory engine with self-learning. LOCOMO 76.2% (4th place). 15 original algorithms, open source (MIT).
使用说明 (SKILL.md)

What is cc-soul?

A zero-vector AI memory engine that learns and improves from every conversation — no vectors, no embeddings, no GPU.

Benchmark

LOCOMO (Long-term Conversational Memory) — the standard benchmark for AI memory systems:

Type Accuracy
open_domain 89.4%
single_hop 84.8%
multi_hop 65.7%
temporal_reasoning 62.5%
adversarial 56.5%
TOTAL 76.2% (4th place globally)

The only symbolic (non-vector) system in the top 5. All systems above use vector databases + LLM; cc-soul uses pure algorithmic recall.

Install & Start

npm install @cc-soul/openclaw
# API auto-starts at localhost:18800

Verify: curl http://localhost:18800/health

If auto-start didn't work, start manually:

node ~/.openclaw/plugins/cc-soul/cc-soul/soul-api.js
# or: node node_modules/@cc-soul/openclaw/cc-soul/soul-api.js
# custom port: SOUL_PORT=9900 node ~/.openclaw/plugins/cc-soul/cc-soul/soul-api.js

Requires Node.js 20+.

API — How to Use

Base URL: http://localhost:18800 (configurable via SOUL_PORT env var)

POST /memories — Store a memory

curl -X POST http://localhost:18800/memories \
  -H "Content-Type: application/json" \
  -d '{"content": "Alice prefers Python over Java", "user_id": "alice"}'

Response: {"stored": true, "facts_extracted": 2}

POST /search — Search memories

curl -X POST http://localhost:18800/search \
  -H "Content-Type: application/json" \
  -d '{"query": "programming language preference", "user_id": "alice", "top_n": 5}'

Response:

{
  "memories": [{"content": "Alice prefers Python over Java", "scope": "fact", "confidence": 0.85}],
  "facts": [{"predicate": "prefers", "object": "Python", "confidence": 0.9}],
  "fact_summary": "Prefers Python over Java"
}

GET /health — Health check

curl http://localhost:18800/health

Response: {"status": "ok", "version": "3.2.2", "memoryCount": 1234, "factCount": 567}

LLM Configuration (optional — user self-service)

Create ~/.cc-soul/data/ai_config.json:

{
  "backend": "openai-compatible",
  "api_base": "https://api.deepseek.com/v1",
  "api_key": "your-key-here",
  "api_model": "deepseek-chat"
}

Without LLM: core recall works locally in \x3C30ms. With LLM: adds query rewriting + result reranking. Users configure their own API key — cc-soul never provides or manages LLM credentials.

How It Works

AAM (Adaptive Associative Memory) — Self-Learning

cc-soul builds a word association network from conversations. The more you talk, the smarter recall becomes.

  • Learning: Every message updates word co-occurrence statistics (PMI-based)
  • Expansion: When you search "marathon", AAM automatically expands to related words like "running", "race", "training" — learned from YOUR conversations, not a pre-built dictionary
  • Graduation: Strong associations (PMI > 3.0) auto-promote to synonym table — zero manual maintenance
  • Learning curve: Hit@3 improves from 30% → 67.5% over 1200 messages (+37.5%)

NAM (Neural Activation Memory) — 9-12 Signal Fusion

Every memory has a real-time activation score computed from multiple signals:

  1. Base activation (ACT-R): frequency + recency decay
  2. Context match (BM25+): keyword matching with IDF weighting + phrase detection
  3. Emotion resonance: mood-congruent recall (happy → recalls happy memories)
  4. Spreading activation: related memories activate each other via AAM network
  5. Interference suppression (MMR): prevents redundant results
  6. Temporal encoding: time-context matching
  7. Sequential co-occurrence (PAM): conversation flow patterns

Three-Layer Distillation

L1: Raw memories (thousands)
  → every 6h →
L2: Topic nodes (~80, with hit/miss scoring)
  → every 12h →
L3: Mental model (identity / style / facts / dynamics)

Topic nodes that score low (miss > hit) are automatically retired. High-scoring nodes promote to core memory.

CNAS Query Dispatch

Different questions need different strategies:

  • precise ("What does Alice like?") → strict BM25, topic partition
  • temporal ("When did we discuss...?") → time signal boost, date matching
  • multi_entity ("How do Alice and Bob differ?") → coverage rerank, iterative recall
  • broad ("Tell me about...") → full scan, relaxed matching

PADCN Emotion System — 5-Dimensional Mood Tracking

cc-soul tracks user emotion in real-time across 5 dimensions:

  • Pleasure / Arousal / Dominance / Certainty / Novelty
  • Mood-congruent recall: when you're happy, positive memories surface more easily
  • Flashbulb effect: highly emotional memories are stored stronger and recalled faster
  • Emotion influences persona selection automatically

11 Auto-Switching Personas

cc-soul dynamically blends personas based on conversation context:

Persona Triggers
Engineer Technical questions, code, debugging
Friend Casual chat, personal topics
Mentor Career advice, growth discussions
Analyst Comparisons, data-driven decisions
Comforter Stress, frustration, emotional messages
Strategist Planning, long-term decisions
Explorer Brainstorming, open-ended questions
Executor Task execution, step-by-step guides
Teacher Explanations, learning requests
Devil's Advocate When user needs pushback
Socratic When user says "帮我理解" / "guide me"

No manual switching needed — persona adapts automatically based on what you're saying.

Self-Learning Feedback Loop

cc-soul improves itself from every interaction:

  1. AAM learns word associations from every message
  2. Recall Thermostat adjusts signal weights based on which recalled memories the user actually engaged with
  3. Topic Tournament scores topic nodes by hit/miss ratio — low-quality summaries get retired
  4. PMI Graduation promotes strong word associations to synonym table automatically
  5. Correction Learning stores corrections with Bayesian verification over 3 conversations

The system gets measurably better over time: Hit@3 improves 30% → 67.5% over 1200 messages.

Performance

Metric Value
Recall latency (p50) 127ms
Storage 5.7 MB (vs 49.2 MB for vectors — 8.6x smaller)
External API calls 0 (pure algorithm)
LLM dependency Optional (recall works without LLM)

Technical Specs

  • 75 modules, 15 original algorithms, ~29K lines TypeScript
  • SQLite local storage, zero cloud, zero telemetry
  • REST API: POST /memories, POST /search, GET /health
  • Compatible with DeepSeek, Claude, OpenAI, Ollama, or any OpenAI-compatible API
  • Open source: https://github.com/wenroudeyu-collab/cc-soul (MIT)

Data & Privacy

  • All data in ~/.cc-soul/data/ (SQLite)
  • PII auto-filtering (emails, phone numbers, API keys stripped)
  • Zero external network calls unless user configures optional LLM
  • Full data export/delete available

Open Source & Security

cc-soul is fully open source under MIT license. All source code (TypeScript) is included in this package and on GitHub.

  • Source code: https://github.com/wenroudeyu-collab/cc-soul
  • License: MIT — free to use, modify, and redistribute
  • Security audit: All code is readable. No obfuscation. Review any file before running.
  • child_process usage: Used to call local LLM CLI for optional query rewriting. No remote shell execution.
  • Network calls: Only to user-configured LLM endpoint (api_base in ai_config.json). Zero calls if no LLM configured.
  • notify.ts: Local notification hooks for OpenClaw plugin integration. No external service calls.

If you have security concerns, read the source. Every line is open.

安全使用建议
What to check before installing/using this skill: - Inspect the package source and package.json on npm (or the bundled files) before running npm install. Look for postinstall scripts, use of child_process, eval/new Function, or network download code. - Search the code for outbound network usage (e.g., fetch, axios, https.request, new WebSocket, raw sockets) and for any references to hard-coded remote endpoints or telemetry. Pay special attention to notify.ts, plugin-entry.js, scripts/install.js and any code that mentions 'notifyOwner', 'telemetry', or 'analytics'. - If you plan to enable LLM features, do not reuse high-value API keys. The skill will read a local config file (~/.cc-soul/data/ai_config.json) containing api_base and api_key; only provide an API key you are willing to use with that external provider and inspect how the key is used (request logs, retries). - Run the service in an isolated environment (container, VM) first to verify runtime behavior: observe outbound connections, file writes, and background jobs. Check which files are created under your home directory (~/.cc-soul, ~/.openclaw/plugins) and review their contents. - Look for evidence of telemetry/phone-home despite the README claiming "zero telemetry." The presence of notification/autotune modules makes this claim worth verifying. - Because the pre-scan flagged a 'system-prompt-override' pattern, review the SKILL.md and any prompts the skill emits (prompt-builder, prompt templates) for instructions that could manipulate an agent or leak sensitive context. If you are not comfortable auditing the code, prefer a vetted alternative or run it only in an isolated environment and avoid storing secrets or highly sensitive personal data in its memories.
功能分析
Type: OpenClaw Skill Name: cc-soul Version: 3.2.5 The cc-soul skill bundle is a highly sophisticated AI memory engine, but it contains several high-risk behaviors that function as significant security vulnerabilities. Specifically, 'context-prep.js' contains logic to automatically find file paths in user messages and read them from the disk ('readFileSync') to provide context to the agent, which facilitates path traversal and arbitrary file disclosure. It also executes local system commands ('execFileSync') using 'grep' to search for code symbols extracted from user input. While these features align with the stated goal of providing a 'Context Engine,' they create a massive attack surface for prompt injection to access sensitive local data. Additionally, 'cli.js' executes arbitrary local CLI commands based on the user-provided 'ai_config.json'. No evidence of intentional malice or hardcoded data exfiltration was found, but the inherent risks justify a suspicious classification.
能力标签
cryptorequires-walletcan-make-purchasesrequires-sensitive-credentials
能力评估
Purpose & Capability
Name/description (zero-vector memory engine) match the included code: many files implement memory, AAM/NAM, distillation, personas, and persistence. However, the SKILL metadata declares 'instruction-only' while the bundle contains a large codebase (152 files) and the instructions tell users to npm install @cc-soul/openclaw and/or run a local node script — a small mismatch in packaging. Also the code imports a notify module and includes auto-tune/feedback systems (notifyOwnerDM, background schedulers) that go beyond a minimal "store & search" API; those extra capabilities are plausible but worth auditing.
Instruction Scope
Runtime instructions are focused: install package, run local server, two HTTP endpoints (/memories, /search), and optional local LLM config file (~/.cc-soul/data/ai_config.json). The instructions ask users to supply an API key if they opt into LLM features. They do not, in the SKILL.md, instruct reading unrelated system files. That said, SKILL.md and README emphasize 100% local operation but the code clearly supports calling remote LLM endpoints if configured; the pre-scan detected a 'system-prompt-override' pattern in SKILL.md which suggests possible prompt-injection content in the instructions (review the full SKILL.md).
Install Mechanism
There is no built-in install spec in the registry, but SKILL.md instructs running `npm install @cc-soul/openclaw` (public npm). Installing an unvetted npm package is moderately risky because packages can contain postinstall scripts, remote downloads, or arbitrary code. The bundle also contains the full source tree (JS/TS files, scripts/install.js, plugin-entry.js), which means the packaged skill has executable code; this increases the attack surface compared to a pure instruction-only skill. Verify the npm package provenance and inspect package.json for postinstall scripts before running.
Credentials
The registry declares no required env vars or credentials. SKILL.md does reference optional environment variables (SOUL_PORT) and an on-disk config file (~/.cc-soul/data/ai_config.json) that may contain an external provider api_key. That is reasonable for optional LLM features, but the skill does not declare those as required env/credentials in metadata — so users might inadvertently place keys in a file that code will read. Also some modules (notify, auto-tune) suggest the skill may send notifications if configured; check how notify is implemented before trusting.
Persistence & Privilege
The code writes persistent state under a user data directory (DATA_DIR / ~/.cc-soul/data) and may create plugin paths (~/.openclaw/plugins/cc-soul). It uses background tasks (hourly/6h/12h jobs) to maintain data. always:false (not force-enabled). This is consistent with a memory engine, but persistent local storage plus background processing and optional notification mechanisms increases potential impact if the code were malicious or buggy. There is no evidence in the metadata that it modifies other skills or system-wide agent settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install cc-soul
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /cc-soul 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.2.5
fix: memory state sync with SQLite for multi-process scenarios
v3.2.4
Fix: auto-start API, userId isolation, manual start guide
v3.2.3
- Added a new "API — How to Use" section with examples for core endpoints (`/memories`, `/search`, `/health`) and configuration. - Documented REST API usage, sample curl commands, and response formats for easier integration. - Clarified optional LLM setup instructions, including user-managed configuration. - No changes to core algorithms or engine behavior; update is documentation-focused.
v3.2.2
**Summary:** Major update adding CLI tools, local plugin/notification integration, and expanded transparency on open source and security. - Added 32 new files including CLI utilities, benchmarking scripts, plugin entry, notification hooks, and core handler modules. - Introduced local CLI (`cli.js`, `cli.ts`) for interacting with cc-soul directly from the terminal. - Added health check, plugin entry points, and local notification integration for OpenClaw. - Updated documentation with an "Open Source & Security" section detailing license, transparency, and safe use of `child_process`. - No breaking changes to core engine; all new APIs and tools are optional.
v3.2.1
- Major cleanup: 14 source and handler files removed, leaving only documentation (SKILL.md) in the codebase. - No changes to core documentation or described functionality; all technical details remain in SKILL.md. - Project structure significantly simplified, with implementation files no longer included in this release.
v3.2.0
- Major cleanup: removed 18 files related to benchmarking, notification, plugin, and standalone utilities. - Documentation updated: SKILL.md reflects version bump to 3.2.0 with no user-facing changes to features or description. - Core functionality appears unaffected; file removals likely target legacy or internal utilities.
v3.1.3
- Expanded documentation to include detailed technical explanations of core features and algorithms (AAM, NAM, PADCN, personas, self-learning loop). - Added full LOCOMO benchmark breakdown, highlighting cc-soul’s symbolic, self-learning advantage and core performance metrics. - Described multi-layer memory distillation, emotion system, and auto-switching personas. - Explained privacy practices, API compatibility, and local data storage in greater detail. - Made version and description updates to reflect new self-learning capabilities.
v3.1.2
- Updated documentation in SKILL.md for clarity and brevity. - Improved section organization and descriptions. - Added an API Endpoints table. - Streamlined data & privacy information. - Refined command list and instructions. - No changes to code functionality; documentation only.
v3.1.1
- Major update: Added full source code (156 new files), implementing the cc-soul zero-vector memory engine as a standalone local REST API server. - SKILL.md revised for improved privacy documentation, local-only storage, and explicit API details. - Now installs and runs a local HTTP server on localhost:18800 for memory and search operations. - Expanded privacy controls: data never leaves the local machine, with auto-PII filtering and export/delete commands. - Optional LLM integration clarified: only query rewrites and recall candidate snippets are sent if configured. - Personality, core memory approach, and command list streamlined and reorganized for clarity.
v3.1.0
cc-soul 3.1.0 — Major upgrade with detailed technical overview, new API mode, and expanded features. - Added detailed product description, LOCOMO benchmark results, and performance metrics. - Introduced REST API mode alongside OpenClaw plugin for broader integration. - Listed core algorithms and architecture innovations (e.g., NAM, AAM, PADCN, Smart Forget). - Expanded command list with new options for stats, reminders, backup, and knowledge graph visualization. - Added optional LLM configuration instructions. - Kept user experience guidelines and personality logic from the previous version.
v2.7.4
Pure behavioral instructions, no technical claims, matches self-improving pattern
v2.7.3
Remove install from description, add local storage + privacy mode mention
v2.7.2
Remove flagged phrases: AI identity hiding, vague tech claims, export ambiguity
v2.7.1
Pure instruction SKILL.md — no install spec in metadata, no code
v2.7.0
v2.7.0: pure instruction SKILL.md, deep understanding engine, avatar soul injection, 126 tests
v2.6.1
Declare auto-start API daemon in SKILL.md to match actual behavior
v2.6.0
v2.6.0: deep understanding engine, avatar soul injection, auto-start API, 126 tests
v2.5.1
Fix SKILL.md declarations to match actual code behavior: declare openclaw.json write, SOUL.md write, optional model download, CLI spawning
v2.5.0
Include 17 auditable source files in package for security transparency
v2.4.1
Fix missing metadata/homepage in frontmatter
元数据
Slug cc-soul
版本 3.2.5
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 37
常见问题

Clawhub Skill 是什么?

Zero-vector AI memory engine with self-learning. LOCOMO 76.2% (4th place). 15 original algorithms, open source (MIT). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 371 次。

如何安装 Clawhub Skill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install cc-soul」即可一键安装,无需额外配置。

Clawhub Skill 是免费的吗?

是的,Clawhub Skill 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Clawhub Skill 支持哪些平台?

Clawhub Skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(linux, darwin, win32)。

谁开发了 Clawhub Skill?

由 wenroudeyu-collab(@wenroudeyu-collab)开发并维护,当前版本 v3.2.5。

💬 留言讨论