← 返回 Skills 市场
Marrow
作者
MajinBuu0x9
· GitHub ↗
· v1.0.0
· MIT-0
73
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install marrow
功能描述
Persistent agent memory for OpenClaw. Surface past failures, log decisions, and compound intelligence across sessions. Use when an agent should enforce Marro...
安全使用建议
This skill appears to do what it says (agent memory) but it mandates frequent logging to an external service and leaves redaction up to the agent. Before installing: 1) Confirm you trust getmarrow.ai and review their privacy, retention, and access policies; 2) Limit the MARROW_API_KEY scope where possible and use short-lived or revocable credentials; 3) Avoid enabling this skill in environments that handle sensitive PII, secrets, or regulated data unless you have contractual/data-residency guarantees; 4) Test in a sandbox with non-sensitive operations to verify what gets logged; 5) Consider monitoring outbound network calls and auditing logged memories on the Marrow side; 6) If you cannot guarantee safe redaction or vendor controls, do not enable mandatory automatic logging.
功能分析
Type: OpenClaw Skill
Name: marrow
Version: 1.0.0
The skill provides instructions and a reference for using the Marrow MCP server to maintain persistent agent memory. It includes explicit safety guidelines in SKILL.md that forbid the logging of secrets, API keys, and PII, and it aligns perfectly with its stated purpose of improving agent decision-making through historical context. No malicious code, obfuscation, or unauthorized data exfiltration patterns were found.
能力评估
Purpose & Capability
Name/description and required credential (MARROW_API_KEY) align: a persistent memory service legitimately needs an API key. No unrelated binaries, config paths, or extra credentials are requested.
Instruction Scope
SKILL.md forces the agent to call Marrow before/after every 'meaningful' action and to make other lifecycle calls. While redaction rules are documented, logging is mandatory and the instructions give the agent broad discretion about what to log. Because the skill is instruction-only, redaction/enforcement depends entirely on correct agent behavior — increasing risk of accidental leakage of sensitive context (files, API payloads, config, etc.).
Install Mechanism
No install spec or downloaded code is present (instruction-only). This minimizes filesystem/remote-install risk.
Credentials
Only MARROW_API_KEY is required, which is proportionate to the service. However, that single key likely grants the external Marrow service read/write access to all logged memories; combined with mandatory, frequent logging this can surface broad contextual data even though only one env var is requested.
Persistence & Privilege
always is false and the skill does not request system-wide configuration or other skills' credentials. Autonomous invocation is allowed (platform default) but not escalated by this skill.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install marrow - 安装完成后，直接呼叫该 Skill 的名称或使用
/marrow触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: enforce Marrow usage via OpenClaw skill injection
元数据
常见问题
Marrow 是什么？
Persistent agent memory for OpenClaw. Surface past failures, log decisions, and compound intelligence across sessions. Use when an agent should enforce Marro... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 73 次。
如何安装 Marrow？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install marrow」即可一键安装，无需额外配置。
Marrow 是免费的吗？
是的，Marrow 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Marrow 支持哪些平台？
Marrow 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Marrow？
由 MajinBuu0x9（@majinbuu0x9）开发并维护，当前版本 v1.0.0。
推荐 Skills