← 返回 Skills 市场
zencrust-ai

Minimal Memory

作者 zencrust-ai · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
804
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install minimal-memory
功能描述
Maintain organized agent memory by tagging entries as GOOD, BAD, or NEUTRAL, storing essentials in MEMORY.md and daily logs for efficient search and cleanup.
安全使用建议
This skill appears to do exactly what it says: manage local memory files. Before installing or running: (1) review and back up any existing $HOME/.openclaw/workspace and MEMORY.md to avoid accidental moves; (2) do not set MEMORY_DIR or WORKSPACE to sensitive system paths (e.g., /root, ~/.ssh, system config dirs) because the scripts will move or archive files based on those values; (3) archive.sh will move files older than 30 days (if they contain only NEUTRAL entries) into an archive subdirectory—run it manually first to confirm expected behavior; (4) there is no network or credential usage in the scripts, so network exfiltration is not evident, but you should still inspect any modifications you plan to make to the scripts or env vars. Overall the skill is internally coherent and low risk when used as intended.
功能分析
Type: OpenClaw Skill Name: minimal-memory Version: 1.0.0 The skill bundle is classified as suspicious due to a critical shell injection vulnerability in `scripts/search.sh`. The user-provided `QUERY` argument is passed unquoted to the `grep` command, allowing for arbitrary command execution on the system where the agent is running. While the overall purpose of the skill (memory management) appears benign, this vulnerability allows an attacker to exploit the agent's execution environment.
能力评估
Purpose & Capability
Name/description match the delivered artifacts: scripts and SKILL.md implement a local memory system (daily logs, MEMORY.md, search, archive, cleanup). No unrelated binaries, services, or credentials are required.
Instruction Scope
SKILL.md instructs use of the included scripts and explains workflow. The scripts only read/write files under a workspace/memory directory and the workspace root; they do not call external services. Note: SKILL.md examples reference the skill script path (~/.openclaw/skills/minimal-memory/scripts/...), while the scripts themselves operate on MEMORY_DIR/WORKSPACE (defaults to $HOME/.openclaw/workspace), which is a minor path mismatch but functionally coherent.
Install Mechanism
No install spec; this is effectively an instruction+script bundle. Nothing is downloaded at install time, and no archive extraction or external package installs are present.
Credentials
The skill declares no required environment variables or credentials. The scripts do honor optional env vars (MEMORY_DIR and WORKSPACE) to override defaults; this is reasonable for configurability but means a user or another process could point the scripts at arbitrary directories—so avoid setting those env vars to sensitive system locations.
Persistence & Privilege
always:false and no attempts to modify other skills or global agent configuration. Script behavior is limited to the skill's own workspace area (by default) and does not request permanent system-wide presence or escalate privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install minimal-memory
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /minimal-memory 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release: GOOD/BAD/NEUTRAL categorization with semantic search utilities
元数据
Slug minimal-memory
版本 1.0.0
许可证
累计安装 2
当前安装数 2
历史版本数 1
常见问题

Minimal Memory 是什么?

Maintain organized agent memory by tagging entries as GOOD, BAD, or NEUTRAL, storing essentials in MEMORY.md and daily logs for efficient search and cleanup. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 804 次。

如何安装 Minimal Memory?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install minimal-memory」即可一键安装,无需额外配置。

Minimal Memory 是免费的吗?

是的,Minimal Memory 完全免费(开源免费),可自由下载、安装和使用。

Minimal Memory 支持哪些平台?

Minimal Memory 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Minimal Memory?

由 zencrust-ai(@zencrust-ai)开发并维护,当前版本 v1.0.0。

💬 留言讨论