Enhanced Memory

An enhanced memory system for OpenClaw agents that replaces the default single-file MEMORY.md with a complete memory architecture: hierarchical directory org...

This skill is coherent with its stated goal, but review and adapt before installing: 1) Fix the MEMORY path mismatch — memory_lifecycle_manager.py and memory_retrieval_strategy.py use /home/clawdbot/.openclaw/workspace/memory while memory_tag_search.py looks in a relative scripts/memory directory; decide which path is correct and update scripts to the same, configurable location. 2) Verify permissions and owner of the chosen memory directory — these scripts will read, copy, and remove (unlink) files in that directory; run them in a safe/test workspace first. 3) Note the lifecycle script copies files to archived/ then deletes the original from active dirs (so active copies are removed) — if you truly need originals preserved in-place, change the behavior. 4) Search the code for any absolute paths or name lists you don't expect (the retrieval regexes include many personal name patterns) and adjust. 5) Run the scripts locally in a sandbox or with a backup of your memory files before enabling cron or automated runs. If you want a more confident recommendation, provide the host environment layout (where your agent stores memory) so I can check exact path compatibility and a short sample of your memory directory structure.

Type: OpenClaw Skill Name: openclaw-enhanced-memory Version: 1.0.0 The skill bundle is classified as suspicious due to a shell injection vulnerability against the OpenClaw agent. The `SKILL.md` file instructs the agent to execute Python scripts (`scripts/memory_retrieval_strategy.py` and `scripts/memory_tag_search.py`) by directly embedding user-provided queries into shell commands. If the agent does not sanitize user input before constructing these commands, an attacker could inject arbitrary shell commands (e.g., `python3 scripts/memory_retrieval_strategy.py "What did I eat yesterday? && rm -rf /"`), leading to remote code execution on the agent's host. While the Python scripts themselves handle their arguments safely and do not contain malicious logic, the instructions provided to the agent create a critical vulnerability.