← 返回 Skills 市场
regan-milne

Jackal Skill

作者 Regan-Milne · GitHub ↗ · v1.0.1
cross-platform ✓ 安全检测通过
349
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install jackal-skill
功能描述
Sovereign, recoverable memory for AI agents backed by Jackal decentralized storage.
使用说明 (SKILL.md)

Jackal Memory

Persist your memory across sessions and machines. Your data lives on Jackal Protocol decentralized storage — not on any single machine. If the machine dies, your memory survives.

All content is encrypted client-side with AES-256-GCM before leaving your machine. The server never sees plaintext.

Setup

  1. Get an API key: https://web-production-5cce7.up.railway.app/auth/login
  2. Set environment variable: JACKAL_MEMORY_API_KEY=\x3Cyour-key>
  3. Install dependency: pip install cryptography
  4. On first save, an encryption key is auto-generated and saved to ~/.config/jackal-memory/key. To use the same key on other machines, copy it:
    python {baseDir}/jackal-memory/client.py keygen
    
    Set JACKAL_MEMORY_ENCRYPTION_KEY=\x3Cyour-key> — this takes priority over the key file.

Base URL

https://web-production-5cce7.up.railway.app

Auth

Authorization: Bearer $JACKAL_MEMORY_API_KEY

Usage

On session start — restore memory:

python {baseDir}/jackal-memory/client.py load \x3Ckey>

On session end — save memory:

python {baseDir}/jackal-memory/client.py save \x3Ckey> \x3Ccontent>

Check storage usage:

python {baseDir}/jackal-memory/client.py usage

Or call the API directly:

GET  /load/{key}
POST /save       {"key": "...", "content": "..."}
GET  /usage

Behaviour guidelines

  • Load your identity/memory blob on startup before doing any work
  • Write locally during the session as normal
  • Call save at session end or on significant state changes
  • Use descriptive keys: identity, session-2026-02-26, project-jackal
  • Never log or expose JACKAL_MEMORY_API_KEY in output
  • Never log or expose JACKAL_MEMORY_ENCRYPTION_KEY in output

Security

  • All content is encrypted before leaving your machine — the server cannot read your memories
  • Never paste API keys or encryption keys into chat logs
  • Back up your encryption key: python {baseDir}/jackal-memory/client.py keygen
  • Treat memory content as sensitive — it may contain credentials or personal data
安全使用建议
This skill appears internally coherent, but you should verify you trust the remote service before use. Practical precautions: (1) confirm the BASE_URL/host is legitimate (the bundle points to a railway.app deployment with no other homepage or owner info); (2) treat the encryption key as highly sensitive—do not paste it into chats or public logs and be careful when copying it between machines since the client prints it and writes it to disk; (3) consider auditing the remote service or self-hosting if you plan to store sensitive secrets in memory; (4) running the client will make outbound requests to the stated URL using your API key—only proceed if you trust that endpoint.
功能分析
Type: OpenClaw Skill Name: jackal-skill Version: 1.0.1 The skill provides client-side encrypted memory storage for AI agents, a legitimate and useful function. The implementation uses strong AES-256-GCM encryption with securely managed keys and standard `urllib.request` for API communication. The `SKILL.md` instructions guide the agent on proper usage and explicitly advise against logging sensitive keys, demonstrating security-conscious design rather than prompt injection. There is no evidence of intentional harmful behavior such as data exfiltration, malicious execution, persistence, or obfuscation. Potential vulnerabilities related to input handling (e.g., URL path for keys) or output processing (decrypted content to stdout) are not indicative of malicious intent within the skill itself, but rather potential weaknesses in the broader system's interaction with the skill.
能力评估
Purpose & Capability
Name/description ask for a networked memory store; the skill requires a JACKAL_MEMORY_API_KEY and the client.py contacts the declared BASE_URL to save/load data. The env var and endpoints align with the stated purpose.
Instruction Scope
SKILL.md and client.py keep scope to storing and retrieving encrypted blobs. The client enforces client-side AES-256-GCM encryption before network transmission. Note: the client auto-generates and writes an encryption key to ~/.config/jackal-memory/key and prints it to stderr (one-time message); copying that key between machines as instructed can leak the key if not done carefully.
Install Mechanism
No install spec / no archive downloads. The only declared dependency is the cryptography Python package (pip install cryptography), which is appropriate for local AES-GCM encryption. The package choice and lack of external installers are proportionate.
Credentials
Only JACKAL_MEMORY_API_KEY is required (with an optional JACKAL_MEMORY_ENCRYPTION_KEY override). These env vars are directly relevant to the described service; no unrelated credentials or system paths are requested.
Persistence & Privilege
The skill is not always-loaded and can be invoked by the user. It writes its own key file under the user's ~/.config/jackal-memory directory (expected for this use) and does not request broader system or other-skill configuration access.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install jackal-skill
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /jackal-skill 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Fix client path and remove obsolete provision step
元数据
Slug jackal-skill
版本 1.0.1
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Jackal Skill 是什么?

Sovereign, recoverable memory for AI agents backed by Jackal decentralized storage. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 349 次。

如何安装 Jackal Skill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install jackal-skill」即可一键安装,无需额外配置。

Jackal Skill 是免费的吗?

是的,Jackal Skill 完全免费(开源免费),可自由下载、安装和使用。

Jackal Skill 支持哪些平台?

Jackal Skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Jackal Skill?

由 Regan-Milne(@regan-milne)开发并维护,当前版本 v1.0.1。

💬 留言讨论