← 返回 Skills 市场
7125
总下载
9
收藏
0
当前安装
43
版本数
在 OpenClaw 中安装
/install clawvault
功能描述
Agent memory system with memory graph, context profiles, checkpoint/recover, structured storage, semantic search, observational memory, task tracking, canvas...
安全使用建议
Review and pin the CLI dependencies before installing, and only enable the hook if you are comfortable with it automatically reading OpenClaw session data, injecting recovered memories into agent context, clearing recovery state on startup, and possibly using an external LLM for observe compression when configured. Avoid storing secrets in transcripts or vault memories unless you have disabled or constrained observation and remote compression.
功能分析
Type: OpenClaw Skill
Name: clawvault
Version: 2.5.13
The OpenClaw AgentSkills bundle for ClawVault is classified as benign. The `SKILL.md` transparently declares its capabilities, including reading/writing files in a vault directory, modifying OpenClaw session transcripts (with backups), and making LLM API calls for 'observe' compression using an optional `GEMINI_API_KEY`. The `hooks/clawvault/handler.js` implements these features by executing the `clawvault` CLI tool using `child_process.execFileSync` with `shell: false`, which is a secure method that prevents shell injection. Furthermore, the handler includes extensive input sanitization for all data passed to CLI commands or injected into agent prompts, demonstrating a strong focus on security. Any prompt injection against the agent is for benign purposes, such as providing context or a memory checklist, and is carefully sanitized.
能力评估
Credentials
The artifact discloses vault access, OpenClaw transcript access, and optional Gemini API use. The hook also scans active session metadata and can trigger observation on heartbeat, compaction, and new-session events, which is broader than a single user-invoked memory lookup.
Install Mechanism
Installation uses global npm packages, including clawvault latest and qmd from a mutable GitHub reference. That is expected for a CLI-backed skill, but it is not pinned to reviewed versions while the hook later invokes those binaries automatically.
Instruction Scope
The hook injects recovered recap and memory text into session messages with system-message authority. Restoring context is purpose-aligned, but treating prior user, assistant, or memory content as system-level context creates a trust-boundary issue because stored text can contain instructions.
Persistence & Privilege
The hook is opt-in and disclosed, but once enabled it persists across gateway lifecycle events and automatically runs recovery clearing, checkpointing, observation, context injection, and weekly reflection without per-event confirmation.
Purpose & Capability
The stated memory, recovery, and context-restoration purpose matches most capabilities, including vault file writes, transcript repair with backups, checkpointing, observation, and weekly reflection. The concern is that the hook automatically processes OpenClaw session transcripts and vault memories, and observe features may use an external LLM provider when configured.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install clawvault - 安装完成后，直接呼叫该 Skill 的名称或使用
/clawvault触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.5.13
Schema conformance pass: remove non-spec openclaw metadata keys, add source field, and keep only documented requirement/install/homepage fields for stable registry parsing.
v2.5.12
Metadata normalization: consolidate runtime dependency, installer, and optional env declarations into canonical top-level openclaw metadata and keep metadata.openclaw synchronized.
v2.5.11
Scanner alignment: add explicit top-level requires/install declarations, keep single-line metadata JSON, and simplify metadata payload for stable runtime dependency extraction.
v2.5.10
Parser compatibility fix: convert top-level openclaw field to single-line JSON and keep metadata JSON single-line for strict frontmatter parsers.
v2.5.9
Compatibility publish: add legacy top-level openclaw block and single-line metadata JSON so requirement/install fields are parsed consistently by stricter scanners.
v2.5.8
Metadata schema alignment: keep canonical install/requirement fields under metadata.openclaw and move custom hook descriptors to metadata.clawvault to improve scanner consistency.
v2.5.7
Metadata and transparency polish: corrected display name, retained structured install/env/hook declarations, and shipped minimal auditable bundle (SKILL.md + HOOK.md + handler.js).
v2.5.6
Security hardening follow-up: adds safe install/review workflow and explicit pre-enable hook inspection guidance; keeps structured install/env/hook metadata with included hook source files for auditability.
v2.5.5
Security transparency release: explicit install/env/hook metadata, documented sensitive transcript access, and published hook source files in skill bundle for pre-install review.
v2.5.4
ClawVault v2.5.4
- Major update: streamlines integration as an OpenClaw agent memory module and revises hook system for advanced, event-driven context management.
- OpenClaw hook pack expanded: now responds to additional lifecycle events (`gateway:heartbeat`, `session:start`, `compaction:memoryFlush`), enabling active observation and memory flush on these triggers.
- Updated security and lifecycle documentation—clarifies local-only data storage, no cloud sync, and strict environment variable use.
- Drops previous hook handler files and older hook structure; now requires explicit hook installation/enabling via OpenClaw.
- CLI now mandates `qmd` for core memory graph and query features.
- Simplified and clarified feature documentation; focuses on context-aware retrieval, auto-checkpoint, active observation, and context death handling.
- Removed references to legacy features (Tailscale networking, task/backlog tracking, Obsidian integration) in docs and metadata.
v2.4.6
v2.4.4-v2.4.6: enriched tasks, kanban sync/import, pluggable compression, dynamic prompt injection, config/recover/route commands, 446 tests
v2.4.2
v2.4.2: Fix init flags (--minimal, --categories, --no-bases, --name), existing vault detection, updated SKILL.md for v2.4.x features (canvas templates, neural theme, Obsidian Bases), corrected hook events to match OpenClaw reality
v2.0.4
Fix metadata format: YAML-embedded JSON (multi-line), declares kind=cli, required bins, install spec, env vars, hook events/capabilities/does_not. Addresses all audit warnings.
v2.0.3
Clean skill package: SKILL.md + hooks only. Removed repo artifacts (bin, tests, scripts, changelog). Full metadata audit compliance.
v2.0.2
v2.0: Memory graph, context profiles, compat diagnostics, CLI modularization, full metadata audit compliance
v2.0.1
Fix metadata: declare kind=cli, env vars, hook events/capabilities/does_not. Addresses audit warning about instruction-only vs full CLI mismatch.
v2.0.0
Memory graph index, graph-aware context retrieval, context profiles (default/planning/incident/handoff), OpenClaw compat diagnostics, CLI modularization into 7 command groups, flexible hook event routing, 367+ tests
v1.12.2
Fix: include _meta.json in publish (was missing since v1.12.1, causing registry/SKILL.md inconsistency audit warning)
v1.12.1
Test: exact v1.11.4 content to verify audit determinism
v1.12.0
Security: HOOK.md now declares install spec, requires.bins, env vars, capabilities, network behavior, and does_not list — matching SKILL.md metadata and handler.js exactly. Fixes 'missing required binary declaration and missing install spec' audit finding.
元数据
常见问题
ClawVault 是什么？
Agent memory system with memory graph, context profiles, checkpoint/recover, structured storage, semantic search, observational memory, task tracking, canvas... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 7125 次。
如何安装 ClawVault？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install clawvault」即可一键安装，无需额外配置。
ClawVault 是免费的吗？
是的，ClawVault 完全免费（开源免费），可自由下载、安装和使用。
ClawVault 支持哪些平台？
ClawVault 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 ClawVault？
由 G9Pedro（@g9pedro）开发并维护，当前版本 v2.5.13。
推荐 Skills