Session Memory (Workspace)

Write session summaries to daily memory files and search session history so OpenClaw can recall and cite past conversations.

This skill is coherent: it reads local OpenClaw session logs and writes/updates per-day memory markdown files so the agent can recall past conversations. Before installing, confirm you are comfortable with the agent reading your session JSONL files and adding their summaries to workspace/memory (these files may contain sensitive content). Also ensure Node.js is available. If you do not want automatic summarization, avoid running the summarize script or restrict who can invoke the skill; when enabled the agent can call the scripts (autonomous invocation is the platform default).

Type: OpenClaw Skill Name: session-memory-workspace Version: 1.0.0 The skill is classified as suspicious due to the exposure of arguments in `SKILL.md` that allow the AI agent to specify arbitrary file paths for read and write operations. Specifically, `session-to-memory.js` accepts `--workspace /path/to/workspace` and `session-search.js` accepts `--sessions-dir /path`. While these arguments are plausibly needed for the skill's stated purpose, they introduce a significant vulnerability: if the AI agent is compromised via prompt injection, it could be coerced into reading from or writing to arbitrary file system locations, potentially leading to information disclosure or arbitrary file modification. The scripts themselves do not exhibit malicious intent (e.g., data exfiltration, backdoors, or direct malicious execution), and the `SKILL.md` does not contain explicit prompt injection instructions for the agent to perform harmful actions.