memory-compact

每日记忆自动压缩备份和关键点提取，每天早上 6:30 运行

This skill appears to implement local backup and simple key‑point extraction as advertised, but there are mismatches between its documentation and code. Before installing or enabling it: 1) Review wrapper.py’s use of subprocess.run — if you prefer no subprocess usage, consider replacing the wrapper with a direct import and call to memory_backup.main() or run memory_backup.py directly. 2) Verify that no network/networking code exists (the shipped code is local-only) and ensure your environment policy prevents unexpected network egress. 3) Be aware the README/SKILL.md mention logs and a Feishu notification file that are not implemented; if you rely on those features, update the code. 4) Test the script in an isolated environment (container or VM) with representative workspace files and check that backups and MEMORY.md are written only under ~/.openclaw/workspace. 5) If you need stronger guarantees, run static analysis or have someone audit the code; if anything seems unclear (why subprocess is used, where notifications/logs should be), ask the author for clarification or correct the wrapper to avoid subprocess usage.

Type: OpenClaw Skill Name: memory-compact Version: 1.0.5 The memory-compact skill is designed to manage local AI interaction logs by extracting key points and moving files to a backup directory. The code in memory_backup.py and wrapper.py is well-structured, lacks network access or obfuscation, and includes proactive security measures such as path validation (is_safe_path) to prevent directory traversal. While the documentation (README.md and SKILL.md) repeatedly emphasizes its safety and mentions previous 'virus detection' issues, the current implementation shows no signs of malicious intent or unauthorized data exfiltration.