← 返回 Skills 市场
237
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install memory-assistant
功能描述
Helps users remember where they put things and schedule voice reminders. Use when the user says "记一下"/"记一下"/"提醒我", records item locations (e.g. keys, passpor...
安全使用建议
This skill appears to implement the advertised feature (local storage + SenseAudio TTS) and only needs SENSEAUDIO_API_KEY. Before installing: (1) review/confirm where data will be stored — the scripts use the current working directory or ~/.memory-assistant (not a guaranteed skill-only directory), so sensitive records (e.g., passport/keys, event details) may be written into your project/workspace; (2) consider setting file permissions or configuring a safe data_dir to avoid accidental commits/backups; (3) confirm you’re comfortable that your SENSEAUDIO_API_KEY will be used to call https://api.senseaudio.cn; check SenseAudio’s privacy policy; (4) note the docs mention loading .env but the scripts do not — if you rely on .env, set env vars explicitly or edit scripts; (5) run the scripts in --dry-run first and inspect created files; (6) if you need stronger privacy, modify the code to encrypt stored data or place storage in a dedicated directory outside your workspace. These inconsistencies and privacy implications are why the skill is flagged suspicious rather than benign.
功能分析
Type: OpenClaw Skill
Name: memory-assistant
Version: 1.0.1
The memory-assistant skill is a legitimate tool designed to help users track item locations and schedule voice reminders. It stores data locally in JSON files (items.json and reminders.json) within a dedicated directory (~/.memory-assistant) and uses the SenseAudio TTS API (api.senseaudio.cn) for speech synthesis. The Python scripts (speak.py and run_reminders.py) use standard subprocess calls for audio playback and do not exhibit signs of data exfiltration, unauthorized persistence, or malicious prompt injection.
能力评估
Purpose & Capability
Name/description (remember item locations, schedule voice reminders) aligns with required capability (SENSEAUDIO_API_KEY and two Python scripts that call the SenseAudio TTS API and read/write items/reminders). No unrelated credentials or remote endpoints are requested beyond api.senseaudio.cn.
Instruction Scope
SKILL.md and reference claim a {baseDir} resolution and show use of load_dotenv(), but both scripts actually use Path.cwd() to choose the data directory (~/.memory-assistant or .memory-assistant in the current working directory) and do not load .env; this mismatch may cause data (items.json, reminders.json, and audio files) to be written into an unexpected workspace path. The scripts read/write local JSON files and call only the documented SenseAudio API — no other exfiltration endpoints — but they will persist possibly-sensitive location/event data in plaintext.
Install Mechanism
No install spec; scripts are instruction-only files requiring only standard Python packages (requests). No download from unknown URLs or archive extraction. Risk from install mechanism is low.
Credentials
Only SENSEAUDIO_API_KEY is required, which is appropriate for the TTS integration. The API key is sent to the documented https://api.senseaudio.cn/v1/t2a_v2 endpoint. No other secrets or unrelated env vars are requested.
Persistence & Privilege
Skill is not always-enabled and does not request elevated privileges, but it persists user data (items.json, reminders.json, generated audio) to the filesystem. Because the code chooses the data dir based on cwd, data may end up in the project/workspace directory rather than an isolated skill folder — increasing chance of accidental disclosure or inclusion in backups/version control.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install memory-assistant - 安装完成后,直接呼叫该 Skill 的名称或使用
/memory-assistant触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Removed the `.env` file from the repository to prevent accidental leakage of sensitive information.
- Updated setup instructions: now require configuring `SENSEAUDIO_API_KEY` via environment variables instead of an `.env` file.
- Simplified Python prerequisites; only `requests` is needed (removed mention of `python-dotenv`).
- Clarified system compatibility for audio playback (added macOS, Windows, Linux player instructions).
- Updated scheduled task setup guidance for all major platforms.
- Minor improvements to documentation for clarity and security.
v1.0.0
memory-assistant 1.0.0
- Initial release of the memory-assistant skill.
- Supports recording and querying item locations via natural language.
- Adds time-based voice reminders with custom advance notifications.
- Integrates SenseAudio TTS for spoken alerts and reminders.
- Provides scripts for playback of item locations and scheduled reminders.
- Data is stored persistently; configuration uses environment variables for security.
元数据
常见问题
memory-assistant 是什么?
Helps users remember where they put things and schedule voice reminders. Use when the user says "记一下"/"记一下"/"提醒我", records item locations (e.g. keys, passpor... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 237 次。
如何安装 memory-assistant?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install memory-assistant」即可一键安装,无需额外配置。
memory-assistant 是免费的吗?
是的,memory-assistant 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
memory-assistant 支持哪些平台?
memory-assistant 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 memory-assistant?
由 q1lin570(@q1lin570)开发并维护,当前版本 v1.0.1。
推荐 Skills