Claw Memory Guardian

自动保存、备份和恢复OpenClaw会话记忆，防止任务中断和信息丢失，支持语义搜索与项目时间线管理。

Install only if you are comfortable with a tool that keeps long-term local memory, backups, and git history of your work. Avoid storing secrets, regulated data, customer details, or confidential business information unless you have reviewed storage, backup, and sharing controls. Do not run the generated autosave script with untrusted workspace configuration, and check for existing memory-guardian binaries or skill directories before installation.

Type: OpenClaw Skill Name: claw-memory-guardian Version: 1.0.1 The skill is classified as suspicious due to its use of powerful system capabilities, specifically the creation and execution of a persistent `auto_save.sh` shell script in the user's workspace (`index.js`). While the current hardcoded content of this script is benign (creating daily memory files and updating JSON timestamps), the mechanism of writing an executable, continuously running script (via `while true; do ... sleep ...; done`) represents a significant persistence capability. This, combined with extensive file system operations (`fs-extra`) and Git version control (`simple-git`) within the user's `OPENCLAW_WORKSPACE`, creates a substantial attack surface. Although no clear malicious intent (e.g., data exfiltration, unauthorized network calls, or explicit prompt injection for harmful actions) is observed in the current code or documentation (`SKILL.md`, `README.md`), these capabilities could be exploited if other vulnerabilities were present or in future iterations, making it a high-risk component.