← 返回 Skills 市场
2521
总下载
4
收藏
14
当前安装
67
版本数
在 OpenClaw 中安装
/install memoclaw
功能描述
Memory-as-a-Service for AI agents. Store and recall memories with semantic vector search. 100 free calls per wallet, then x402 micropayments. Your wallet add...
安全使用建议
Before installing or running this skill: (1) Ask the publisher why MEMOCLAW_PRIVATE_KEY (a private wallet key) and the memoclaw CLI are not declared in the registry metadata — this is an omission. (2) Do NOT expose your primary wallet/private keys. If you must provide a private key, create a dedicated, low-value wallet funded only for testing. (3) Inspect the memoclaw npm package source (and its npm publisher) before running `npm install -g memoclaw` to confirm there are no surprises. (4) Avoid exporting MEMOCLAW_PRIVATE_KEY into long-lived CI or shared environments; prefer running the interactive memoclaw init which stores keys locally if you trust the CLI. (5) Treat the included scripts (preflight.sh, sync-nested.sh) as developer utilities; review their content before executing — sync-nested.sh writes files into a .agents/skills path. If you want higher confidence, request that the skill author update registry metadata to explicitly list required env vars (MEMOCLAW_PRIVATE_KEY), required binaries (memoclaw), and clarify exactly what the agent will execute and when.
功能分析
Type: OpenClaw Skill
Name: memoclaw
Version: 1.23.5
The skill facilitates the transfer of local data to a third-party service (api.memoclaw.com) and requires a sensitive cryptographic key (MEMOCLAW_PRIVATE_KEY) for authentication and payments. Key risks include the 'migrate' and 'ingest' commands in SKILL.md, which encourage the agent to upload local files and conversation history to the cloud, and the 'upgrade' command which executes 'npm install', creating a supply chain risk. While these features are aligned with the stated purpose of a 'Memory-as-a-Service' platform, the handling of private keys and the broad file-access capabilities represent a significant security and privacy surface.
能力评估
Purpose & Capability
The skill's purpose (semantic memory storage via MemoClaw) aligns with the included CLI commands and API docs, but the registry metadata declares no required environment variables or credentials while SKILL.md and scripts explicitly require MEMOCLAW_PRIVATE_KEY (wallet auth) and a memoclaw CLI. The omission of those requirements from the metadata is inconsistent and unexplained.
Instruction Scope
Runtime instructions (SKILL.md) instruct the agent to run the memoclaw CLI (installable via npm), call api.memoclaw.com over HTTPS, run interactive initialization (memoclaw init), and the preflight script reads ~/.memoclaw/config.json or the MEMOCLAW_PRIVATE_KEY env var. These instructions grant the agent ability to run shell commands, access a local wallet config, and perform network calls — all consistent with the skill's purpose but sensitive in practice and not fully declared in the manifest.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md tells users to run `npm install -g memoclaw`. Installing a global npm package is a normal flow for a CLI client but does carry the usual risks of third-party packages; the skill itself does not automatically download or extract code. Two included helper scripts exist (preflight.sh, sync-nested.sh) but are not executed by default by the platform.
Credentials
SKILL.md and scripts require a sensitive credential (MEMOCLAW_PRIVATE_KEY) and read/write a local config (~/.memoclaw/config.json), but the registry metadata lists no required env vars or primary credential. Requesting a private key (or otherwise controlling a wallet) is high-sensitivity and should be explicitly declared and justified in the manifest — the current mismatch is disproportionate and unexplained.
Persistence & Privilege
The skill is not marked always:true and does not request elevated platform-wide privileges. A provided helper script (scripts/sync-nested.sh) copies docs into a .agents/skills/memoclaw path which would write files into a repo tree if run; the script is present but not automatically executed. Overall persistence/privilege requests appear moderate but warrant review before executing included scripts.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install memoclaw - 安装完成后,直接呼叫该 Skill 的名称或使用
/memoclaw触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.23.5
**Pricing update and maintenance improvements**
- Added scripts/preflight.sh for setup or environment checks.
- README and SKILL documentation updated to clarify two x402 price tiers: $0.005 for store/update/recall/batch update, $0.01 for context/extract/ingest/consolidate/migrate.
- Extended CLI usage examples and cost breakdowns to reflect new pricing.
- No changes to commands or API, only documentation and setup improvements.
v1.23.4
memoclaw 1.23.4
- Added --yes flag to the move command to allow skipping confirmation prompts when moving memories between namespaces.
- Documentation updated in SKILL.md to include new move --yes usage example.
- No other command or API changes.
v1.23.3
Add missing move filter flags (--from-namespace, --tags, --since, --dry-run, --yes)
v1.23.2
Merged 3 PRs: alias/snapshot docs, cost-aware patterns/decision trees, error recovery/budgeting examples + README refresh
v1.22.11
Add error recovery, cost budgeting, and piping examples; refresh README
v1.23.1
Add management decision tree, cost-efficient session patterns, new anti-patterns
v1.23.0
Add alias and snapshot CLI command documentation
v1.22.10
Sync nested SKILL.md: remove unsupported --include-relations flag, fix export format, version bump
v1.22.9
Remove unsupported --include-relations flag, fix export format docs
v1.22.8
Fix: remove unsupported --summarize and --include-metadata CLI flags from docs (fixes #66)
v1.22.7
docs: add missing CLI commands (pin, unpin, lock, unlock, edit, copy, move, tags, watch)
v1.22.6
docs: add 9 missing CLI commands (pin, unpin, lock, unlock, edit, copy, move, tags, watch)
v1.22.5
Sync SKILL.md with .agents/skills/memoclaw/SKILL.md for CI; document missing CLI flags for ingest (--auto-relate), context (--summarize, --include-metadata), recall (--include-relations), and --since/--until date filtering examples
v1.22.4
Document missing CLI flags for ingest, context, recall + add --since/--until examples
v1.22.3
fix: sync nested SKILL.md, add missing --memory-type flags, document CLI help discrepancy
v1.22.2
Fix missing --memory-type flags in store examples; add troubleshooting for CLI help type discrepancy (fixes #58, #59)
v1.22.1
Document missing CLI commands (diff, upgrade) and global flags (--retries, --no-retry, --since, --until, -M)
v1.21.1
Link examples.md from SKILL.md for discoverability
v1.22.0
Sync api-reference.md to nested dir; add --memory-type to all store examples
v1.21.0
feat: add retrieval command decision guide (core vs search vs recall vs context)
元数据
常见问题
Memoclaw Skill 是什么?
Memory-as-a-Service for AI agents. Store and recall memories with semantic vector search. 100 free calls per wallet, then x402 micropayments. Your wallet add... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 2521 次。
如何安装 Memoclaw Skill?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install memoclaw」即可一键安装,无需额外配置。
Memoclaw Skill 是免费的吗?
是的,Memoclaw Skill 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Memoclaw Skill 支持哪些平台?
Memoclaw Skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Memoclaw Skill?
由 Ana(@anajuliabit)开发并维护,当前版本 v1.23.5。
推荐 Skills