← 返回 Skills 市场
83
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install memory-lcm
功能描述
Stores and manages complete conversation history with searchable SQLite storage, chunked and daily summaries, and auto-syncs key decisions to MEMORY.md.
安全使用建议
This skill appears to do what it says: it will store full conversation text locally in ~/.openclaw/workspace/data/tony-lcm.db and append extracted 'decisions' to ~/.openclaw/workspace/MEMORY.md. It does not request credentials or call external services, but note the privacy implications: everything logged is saved in plaintext on disk and the auto-extraction (regexes like 'will ...', 'decided to ...') may append unintended content to MEMORY.md. Before installing, consider: (1) Do you want your full chat history persisted on disk? (2) Review and back up or protect ~/.openclaw/workspace (file permissions, encryption) if necessary. (3) Since this package comes from an unknown source (no homepage), review the code or run in an isolated environment if you have privacy/security concerns. If you proceed, inspect the MEMORY.md contents after syncs and consider modifying the extraction patterns or disabling auto-sync if unwanted.
功能分析
Type: OpenClaw Skill
Name: memory-lcm
Version: 1.0.0
The skill bundle contains significant SQL injection vulnerabilities due to the use of manual string concatenation and template literals in database queries rather than parameterized inputs, specifically in src/search.js and src/messages.js. While the stated purpose of managing conversation history and syncing to MEMORY.md is followed, the insecure handling of user-controlled session keys and search terms poses a risk of local database manipulation. No evidence of intentional data exfiltration or malicious remote execution was found.
能力评估
Purpose & Capability
Name/description align with code and manifest: message storage, chunk/daily summaries, search, compaction, and auto-sync to MEMORY.md. Uses sql.js (WASM) for a local SQLite DB stored at ~/.openclaw/workspace/data/tony-lcm.db — appropriate for the stated purpose.
Instruction Scope
SKILL.md and bin/tony-lcm.js instruct running npm install and using the CLI which will write/read local files (DB and MEMORY.md). The instructions and code do not access external endpoints or unrelated system data, but they do auto-extract and append 'decisions' to a persistent MEMORY.md file — this is within scope but is a privacy-sensitive side effect users should expect.
Install Mechanism
No formal install spec in registry; SKILL.md requires npm install. package.json depends only on sql.js from the npm registry (package-lock shows a normal registry URL). This is a standard, traceable install vector (moderate trust required for npm packages). No obscure download URLs or archive extraction.
Credentials
No required environment variables, credentials, or external config paths are requested. The code uses HOME (or os.homedir()) to place files under ~/.openclaw — appropriate and proportional to file-backed memory management.
Persistence & Privilege
The skill creates and persists files (DB and MEMORY.md) in the user's home workspace. always is false. Because agents may invoke skills autonomously by default, be aware the skill could be triggered to write conversation content to disk without additional prompts — this is expected behavior but has privacy implications.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install memory-lcm - 安装完成后，直接呼叫该 Skill 的名称或使用
/memory-lcm触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of memory-lcm, a lossless context manager for OpenClaw agents
- Stores every conversation message in a local SQLite database with zero truncation
- Provides CLI commands for searching, recalling, compacting, summarizing, and syncing conversation history
- Automatically syncs key decisions to MEMORY.md for easy reference
- Supports full-text search and daily/chunk summaries while maintaining session isolation
- No native dependencies; uses sql.js (WebAssembly), making it cross-platform
元数据
常见问题
Memory Lcm 是什么？
Stores and manages complete conversation history with searchable SQLite storage, chunked and daily summaries, and auto-syncs key decisions to MEMORY.md. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 83 次。
如何安装 Memory Lcm？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install memory-lcm」即可一键安装，无需额外配置。
Memory Lcm 是免费的吗？
是的，Memory Lcm 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Memory Lcm 支持哪些平台？
Memory Lcm 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Memory Lcm？
由 luke（@louch84）开发并维护，当前版本 v1.0.0。
推荐 Skills