内存快照分析（v8 heap snapshot）+ 性能分析（perf_hooks）

This skill appears to do what it says: generate V8 heap snapshots and record perf_hooks-based profiling locally. Before installing, note that: 1) it creates ~/.openclaw/heap-snapshots/ and ~/.openclaw/profiles/ and stores potentially large .heapsnapshot files—delete them after analysis; 2) it reads low-level process info (internal Node APIs and /proc/self/fd on Linux) to build diagnostics — expected for profiling but it does access process state; 3) SKILL.md and the code disagree about the output path (memory/perf/ vs ~/.openclaw/...), so confirm where files will land on your system; 4) there are no network calls or credential requests, so no outward exfiltration is apparent. If you run this on a production agent, consider running it in a controlled/dev environment first and inspect the files it creates.

Type: OpenClaw Skill Name: heap-dump Version: 1.0.1 The skill bundle provides legitimate diagnostic tools for Node.js memory and performance analysis. The scripts `heap-dump.js` and `profiler.js` use standard Node.js APIs (v8, perf_hooks) to collect system metrics and generate heap snapshots, storing them locally in the user's home directory without any evidence of data exfiltration, remote execution, or malicious intent.