← 返回 Skills 市场

Openclaw Memory Qdrant

Name: Openclaw Memory Qdrant
Author: zuiho-kai

作者 zuiho · GitHub ↗ · v1.0.15

cross-platform ✓ 安全检测通过

1269

总下载

当前安装

版本数

在 OpenClaw 中安装

/install openclaw-memory-qdrant

功能描述

Local semantic memory with Qdrant and Transformers.js. Store, search, and recall conversation context using vector embeddings (fully local, no API keys).

使用说明 (SKILL.md)

memory-qdrant

Use when you need your OpenClaw agent to remember and recall information across conversations using semantic search.

⚠️ Privacy Notice: The optional autoCapture feature (disabled by default) can capture PII like emails and phone numbers if you enable allowPIICapture. Only enable if you understand the privacy implications.

Local semantic memory plugin powered by Qdrant vector database and Transformers.js embeddings. Zero configuration, fully local, no API keys required.

Features

Semantic search with local Transformers.js embeddings
In-memory mode (zero config) or persistent Qdrant storage
Optional auto-capture of conversation context (opt-in, disabled by default)
Context-aware memory recall
Fully local, no API keys or external services required

Installation

clawhub install memory-qdrant

First-time setup: This plugin downloads a 25MB embedding model from Hugging Face on first run and may require build tools for native dependencies (sharp, onnxruntime). See README for detailed installation requirements.

Configuration

Enable in your OpenClaw config:

{
  "plugins": {
    "memory-qdrant": {
      "enabled": true
    }
  }
}

Options:

persistToDisk (default: true) - Save memories to disk in memory mode. Data stored in ~/.openclaw-memory/ survives restarts. Set to false for volatile memory.
storagePath (optional) - Custom storage directory. Leave empty for default ~/.openclaw-memory/.
autoCapture (default: false) - Auto-record conversations. Privacy protection enabled by default: text containing PII (emails, phone numbers) is automatically skipped.
allowPIICapture (default: false) - Allow capturing PII when autoCapture is enabled. Only enable if you understand the privacy implications.
autoRecall (default: true) - Auto-inject relevant memories
qdrantUrl (optional) - External Qdrant server (leave empty for in-memory)

Usage

Three tools available:

memory_store - Save information

memory_store({
  text: "User prefers Opus for complex tasks",
  category: "preference"
})

memory_search - Find relevant memories

memory_search({
  query: "workflow preferences",
  limit: 5
})

memory_forget - Delete memories

memory_forget({ memoryId: "uuid" })
// or
memory_forget({ query: "text to forget" })

Privacy & Security

Disk persistence (default): Memories saved to ~/.openclaw-memory/ and survive restarts. Set persistToDisk: false for volatile memory.
In-memory mode: When persistToDisk: false, data cleared on restart
Qdrant mode: Data sent to configured server (use trusted servers only)
Network: Downloads ~25MB model from Hugging Face on first run
PII Protection: By default, autoCapture skips text containing emails or phone numbers. Set allowPIICapture: true only if you understand the privacy implications.
autoCapture: Disabled by default for privacy. When enabled, only captures text matching semantic triggers (preferences, decisions, facts) and skips PII unless explicitly allowed.

Technical Details

Vector DB: Qdrant (in-memory or external)
Embeddings: Xenova/all-MiniLM-L6-v2 (local)
Module: ES6 with factory function pattern

Links

安全使用建议

This plugin appears to do what it claims: local embeddings + Qdrant-backed memory. Before installing: 1) Be aware it will download a ~25MB model from huggingface.co at first run and install native dependencies (sharp, onnxruntime) that may need build tools. 2) It persists data by default to ~/.openclaw-memory/ — set persistToDisk: false if you want volatile memory, and do not enable allowPIICapture unless you accept the privacy risk. 3) If you plan to use an external Qdrant, only provide a trusted server URL. 4) Review index.js (and test-fixes.js) yourself; there is a small implementation concern (use of api.logger in one catch path may be undefined and could cause runtime errors) — this looks like a bug, not malicious code. 5) For highest safety, test in an isolated environment and lock dependency versions (npm ci) before enabling in production.

功能分析

Type: OpenClaw Skill Name: openclaw-memory-qdrant Version: 1.0.15 The OpenClaw Memory (Qdrant) plugin is designed for local semantic memory. It demonstrates a strong focus on security and privacy, with explicit PII protection (autoCapture disabled by default, allowPIICapture defaults to false, and `containsPII` function to detect and skip PII), robust input sanitization (`sanitizeInput` to prevent XSS/injection), and prompt injection mitigation for stored memories (`formatRelevantMemoriesContext` with explicit agent instructions). The `CHANGELOG.md` and `test-fixes.js` confirm proactive addressing of ReDoS vulnerabilities and other security concerns. All file system and network operations are aligned with the stated purpose and lack any indicators of intentional malicious behavior.

能力评估

✓ Purpose & Capability

Name/description (local semantic memory using Qdrant and Transformers.js) match the included package.json, dependencies (@qdrant/js-client-rest and @xenova/transformers), and the code: it provides memory_store/search/forget, optional external Qdrant URL, and local embeddings. Required binaries (node, npm) and no environment variables are appropriate for this purpose.

✓ Instruction Scope

SKILL.md only instructs installing/enabling the plugin, configuring storage and autoCapture, and documents the model download from Hugging Face. The runtime code reads/writes only its own persistPath and uses the configured qdrantUrl if provided. There are no instructions to read unrelated system files or exfiltrate credentials. Note: autoCapture/allowPIICapture are opt-in and documented; default behavior skips PII.

ℹ Install Mechanism

The registry metadata lists no explicit install spec (instruction-only), but the skill bundle contains code, package.json and package-lock.json requiring npm dependencies and native modules (sharp, onnxruntime). Installing will require npm (and platform build tools) and will cause downloads from npm and a ~25MB model from huggingface.co. This is expected for local embeddings but is higher friction than a pure instruction-only skill and worth noting.

✓ Credentials

The skill requests no environment variables or credentials. The only external network interactions are explicit and documented: (1) optional qdrantUrl supplied by the user for external Qdrant, and (2) Transformers.js model download from Hugging Face. No hidden env vars or unrelated credentials are requested.

ℹ Persistence & Privilege

The plugin defaults to disk persistence (persistToDisk: true) and stores data under ~/.openclaw-memory/ (or a user-specified storagePath). This is coherent with a memory plugin but has privacy implications: persistent storage plus the (opt-in) autoCapture/allowPIICapture features can store PII if misconfigured. always:false and no global config modifications are used, which is appropriate.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install openclaw-memory-qdrant
安装完成后，直接呼叫该 Skill 的名称或使用 /openclaw-memory-qdrant 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.15

Custom storage path and default disk persistence

v1.0.13

Added disk persistence for memory mode

v1.0.12

Added prominent PII privacy warning to SKILL.md

v1.0.11

- Added comprehensive documentation and usage guide in SKILL.md. - Clarified configuration options including privacy, PII protection, and memory modes. - Detailed installation requirements and first-time model download behavior. - Explained usage of memory_store, memory_search, and memory_forget tools. - Enhanced privacy and security notes, describing default protections and opt-in options. - Provided links for support and further information.

元数据

Slug openclaw-memory-qdrant

版本 1.0.15

许可证 —

累计安装 9

当前安装数 8

历史版本数 4

常见问题