← 返回 Skills 市场
2830201534

Pidan Memory

作者 MoonCoder · GitHub ↗ · v1.1.2
cross-platform ⚠ suspicious
399
总下载
0
收藏
2
当前安装
6
版本数
在 OpenClaw 中安装
/install pidan-memory
功能描述
Local persistent vector memory system using LanceDB and Ollama for semantic search and multi-user isolated long-term AI assistant memory.
安全使用建议
This skill appears to implement the described local memory system, but review and consider the following before installing: - Metadata mismatch: The registry lists no required binaries/env-vars, but the hook and docs require python3 and a running Ollama (localhost:11434). The code also expects the OPENCLAW_USER_ID environment variable for permission checks. Make sure you understand and set these before enabling the hook. - Privacy: Enabling the Hook causes automatic capture of message content and writing to ~/.openclaw/workspace/memory. If you enable it, verify the data directory and retention policies, and confirm whether any sensitive content could be recorded. - Environment exposure: handler.ts passes process.env to the spawned Python process. That means any environment variables available to the host process will be visible to the script. Avoid running it in a context containing secrets you don't want exposed. - Installer scripts: The included scripts can install Ollama and pull models. The Linux installer uses curl | sh (remote install script); run such scripts only from trusted sources or inspect them first. Model downloads can be large and the download 'accelerator' script repeatedly kills and restarts downloads — this is unusual but not obviously malicious. - Recommended steps: inspect the full installer script from https://ollama.ai/install.sh before running; run the skill in a sandbox or test environment first; back up and inspect ~/.openclaw/workspace/memory before enabling automatic hooks; and confirm that OPENCLAW_USER_ID will be set by your platform as expected. If you want, I can list the exact files and lines that reference OPENCLAW_USER_ID, the curl|sh install command, and where process.env is forwarded so you can inspect them in detail.
功能分析
Type: OpenClaw Skill Name: pidan-memory Version: 1.1.2 The pidan-memory skill bundle implements a local vector-based memory system using LanceDB and Ollama. It includes automated chat analysis (auto_memory.py), semantic search (memory_lance.py), and service management scripts. While the installer (scripts/install_ollama.sh) uses the risky 'curl | sh' pattern, it points to the official Ollama domain to install a legitimate dependency. The system demonstrates security consciousness by prioritizing environment variables (OPENCLAW_USER_ID) over user-supplied parameters for permission checks during memory deletion and sharing operations.
能力评估
Purpose & Capability
Name/description align with the code: the Python/TS files implement a LanceDB + Ollama local memory system with automatic hook-based capture, storage, search, deduplication, and per-user isolation. However, registry metadata claims no required binaries/env-vars while HOOK.md, SKILL.md and the code expect python3 and a running Ollama (localhost:11434). That metadata mismatch is inconsistent and worth flagging.
Instruction Scope
The hook (handler.ts + auto_memory.py) will execute on message events and spawn a Python process that receives message content on stdin and may persist data under ~/.openclaw/workspace/memory. The runtime relies on the OPENCLAW_USER_ID environment variable for access control (SKILL.md and code require it), but the skill metadata did not declare this. The code reads/writes only within the ~/.openclaw workspace and calls localhost Ollama for embeddings; it does not appear to call external network endpoints for embedding or exfiltrate data. Still, automatic capture of every message has privacy implications and the hook receives process.env (handler.ts merges process.env into the child's env), so existing environment variables are available to the spawned process.
Install Mechanism
There is no formal install spec in the registry, but the package includes helper scripts. scripts/install_ollama.sh performs curl -fsSL https://ollama.ai/install.sh | sh on Linux (a remote installer piped to sh). scripts/download_accelerator.sh repeatedly starts and kills 'ollama pull' invocations to accelerate downloading a model. These scripts execute remote code/operations and spawn background services (ollama serve). Running curl|sh installers and repeated background process manipulation increases risk and should be reviewed/ran only from a trusted system or sandbox.
Credentials
The skill does not declare required environment variables in the registry, but the code and SKILL.md depend on OPENCLAW_USER_ID for authentication and optionally respect MEMORY_MODE and MEMORY_DEDUP_AFTER. handler.ts explicitly passes the full process.env into spawned Python processes, exposing any environment variables present to the child. No external API keys are requested, and network calls appear limited to localhost (Ollama) and local lancedb, which is proportionate — but the undeclared reliance on OPENCLAW_USER_ID and passing of process.env are mismatches and a modest risk.
Persistence & Privilege
always is false and the skill is user-invocable. Installing the Hook (per SKILL.md) grants the skill automatic execution on message events — this is expected for an auto-memory hook. The skill writes to ~/.openclaw/workspace/memory (its own data); it does not modify other skills or global agent configs. No 'always: true' or implicit global privileges were found.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install pidan-memory
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /pidan-memory 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.1.2
- 增加安全说明,包括用户身份验证方法(通过环境变量 `OPENCLAW_USER_ID` 获取真实用户ID)和权限控制说明。 - 明确禁止通过参数中的 `user_id` 设置身份,需使用环境变量传递用户ID。 - 说明删除和共享记忆等敏感操作仅限创建人本人。 - 丰富了 Hook 模式下用户ID穿透的说明。 - 其余功能和命令保持兼容,未作破坏性更改。
v1.1.1
- Added multi-user and shared memory modes; users can now switch between private (isolated) and shared (collaborative) memory. - Introduced memory management commands: delete, share, list, deduplicate, and stats for finer control and collaboration. - New configuration file (`config.yaml`) and environment variable support for mode and deduplication settings. - Enhanced permission and visibility controls: only memory creators can delete/share their memories, with two-step delete confirmation. - Command-line interface and documentation updated to reflect new features and workflows.
v1.1.0
- Introduced automatic memory with hook support, enabling post-dialog semantic memory capture across 16 categories. - Added HOOK.md, auto_memory.py, and handler.ts files for auto-trigger functionality and integration instructions. - Simplified documentation, highlighting both auto (recommended) and manual memory usage. - Updated setup and installation instructions for easier enablement. - No changes to core manual commands: remember, recall, recent_memories.
v1.0.2
- Improved documentation with detailed usage, trigger rules, architecture diagram, and parameter explanations in SKILL.md. - Added clear descriptions for each command: remember, recall, recent_memories. - Documented auto/manual trigger logic and evaluation flow. - Listed supported scenarios (personal info, preferences, habits, work, etc.). - Provided CLI usage examples and outlined technical stack.
v1.0.1
- Added detailed skill documentation in Chinese and English covering features, architecture, usage, and auto-memory types - Clarified auto and manual memory triggers with concrete evaluation logic and user interaction examples - Documented command formats for "remember", "recall", and "recent_memories" with sample payloads - Outlined technical stack, installation steps, and data storage location - Emphasized support for multi-user isolated memories and local-only data storage for privacy
v1.0.0
- Initial release of the "pidan-memory" skill. - Provides a local persistent vector memory system using LanceDB and Ollama. - Supports semantic search, multi-user memory isolation, and both manual and automatic memory storage. - Auto-detects and remembers key user info, preferences, goals, technical configurations, and more after each conversation. - Includes CLI commands for adding, searching, and retrieving recent memories. - Ensures sensitive information (like passwords or API keys) is only stored in environment variables.
元数据
Slug pidan-memory
版本 1.1.2
许可证
累计安装 2
当前安装数 2
历史版本数 6
常见问题

Pidan Memory 是什么?

Local persistent vector memory system using LanceDB and Ollama for semantic search and multi-user isolated long-term AI assistant memory. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 399 次。

如何安装 Pidan Memory?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install pidan-memory」即可一键安装,无需额外配置。

Pidan Memory 是免费的吗?

是的,Pidan Memory 完全免费(开源免费),可自由下载、安装和使用。

Pidan Memory 支持哪些平台?

Pidan Memory 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Pidan Memory?

由 MoonCoder(@2830201534)开发并维护,当前版本 v1.1.2。

💬 留言讨论