← 返回 Skills 市场
mig6671

Vector Memory Hack

作者 mig6671 · GitHub ↗ · v1.0.3
cross-platform ⚠ suspicious
2933
总下载
9
收藏
13
当前安装
4
版本数
在 OpenClaw 中安装
/install vector-memory-hack
功能描述
Fast semantic search for AI agent memory files using TF-IDF and SQLite. Enables instant context retrieval from MEMORY.md or any markdown documentation. Use when the agent needs to (1) Find relevant context before starting a task, (2) Search through large memory files efficiently, (3) Retrieve specific rules or decisions without reading entire files, (4) Enable semantic similarity search instead of keyword matching. Lightweight alternative to heavy embedding models - zero external dependencies, <10ms search time.
安全使用建议
This skill appears to implement local TF-IDF search for an agent's MEMORY.md, but there are inconsistencies and privacy concerns you should address before installing: - Verify dependency claims: the code comments mention scikit-learn but the README and SKILL.md say "zero dependencies." Open the full scripts/vector_search.py and ensure it does not import non-stdlib packages; if it does, vendor or install those explicitly and review them. - Update default paths before running: change MEMORY_PATH and VECTORS_DIR in scripts/vector_search.py to point to a safe test file/directory. Don't run it against your real workspace until you confirm behavior. - Inspect MEMORY.md for secrets: because the tool is designed to surface items like server addresses and credentials, remove or rotate any secrets in MEMORY.md or restrict the file before using the skill. - Confirm absence of network I/O: scan the full script for imports like requests, urllib, socket, or subprocess calls that could transmit data. In the provided excerpts there are no obvious network calls, but review the rest of the file to be sure. - Note missing files/claims: README and SKILL.md mention a CLI wrapper 'vsearch' but that wrapper isn't included — if you rely on that, either create a safe wrapper or call the Python script directly. - Test in a sandbox: run the script in an isolated container or VM on a non-sensitive MEMORY.md to validate behavior and performance claims before integrating with agents. If you want, I can: 1) scan the remainder of scripts/vector_search.py for any network or obfuscated behavior, 2) produce a safe replacement wrapper that respects a configurable MEMORY_PATH, or 3) show exact edits to hardcoded paths and logging to make operation explicit and safer.
功能分析
Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill The OpenClaw skill 'vector-memory-hack' provides a lightweight, local semantic search for an AI agent's `MEMORY.md` file using TF-IDF and SQLite. All file operations in `scripts/vector_search.py` are confined to the agent's workspace (`/root/.openclaw/workspace/`), and the script uses only Python's standard library, with no external dependencies or network calls. The `SKILL.md` instructions are clear, directly related to the stated purpose, and do not contain any prompt injection attempts to exfiltrate data or perform unauthorized actions. The mention of 'Server addresses and credentials' in `SKILL.md` is in the context of the agent retrieving this information from its own memory for a task, not stealing it.
能力评估
Purpose & Capability
The name/description (local semantic search of MEMORY.md) aligns with the included Python script which parses a MEMORY.md, computes TF-IDF, and stores vectors in SQLite. However the package repeatedly claims "zero dependencies" while the script's top comment mentions scikit-learn (a non-stdlib dependency) — an internal inconsistency. The README and SKILL.md also advertise a CLI wrapper named 'vsearch' but that file is not present in the bundle.
Instruction Scope
Runtime instructions focus on parsing and searching MEMORY.md (appropriate), but they also explicitly instruct agents to extract sensitive items ('Server addresses and credentials') from the memory before acting. While that's within the stated purpose, it increases the risk surface because the skill will be used to read and surface whatever is stored in MEMORY.md (including secrets). The script defaults to a workspace path (/root/.openclaw/workspace/MEMORY.md) which means it can read agent workspace files without additional configuration.
Install Mechanism
There is no install spec (script is included and run directly), which minimizes supply-chain risk. Still, the code's own documentation claims scikit-learn while README/SKILL.md insist on 'stdlib only' — this discrepancy should be resolved before use (either the code imports scikit-learn or it doesn't). No network downloads or external install URLs are present in the provided files.
Credentials
The skill declares no required env vars or config paths, but the script hardcodes default paths under /root/.openclaw/workspace (MEMORY_PATH, VECTORS_DIR). That effectively requires read/write access to the agent workspace. No credentials are requested, which is appropriate, but the implicit access to workspace files means the skill can read any content placed in MEMORY.md — including secrets — without explicit declaration.
Persistence & Privilege
The skill does not request permanent inclusion (always:false) and does not attempt to modify other skills or system-wide settings. It will create a local vectors directory and an SQLite DB in VECTORS_DIR (normal for an indexer).
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install vector-memory-hack
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /vector-memory-hack 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.3
No user-facing changes in this release. - Version bump to 1.0.3 with no detected file or documentation updates.
v1.0.2
- Documentation updated in README.md for clarity and detail. - No code or functionality changes; this version focuses on improving written usage instructions and troubleshooting guidance.
v1.0.1
Update: Added README with full documentation and benefits comparison
v1.0.0
Initial release: Lightweight TF-IDF semantic search for AI agent memory. Zero dependencies, <10ms search, 80% token savings.
元数据
Slug vector-memory-hack
版本 1.0.3
许可证
累计安装 14
当前安装数 13
历史版本数 4
常见问题

Vector Memory Hack 是什么?

Fast semantic search for AI agent memory files using TF-IDF and SQLite. Enables instant context retrieval from MEMORY.md or any markdown documentation. Use when the agent needs to (1) Find relevant context before starting a task, (2) Search through large memory files efficiently, (3) Retrieve specific rules or decisions without reading entire files, (4) Enable semantic similarity search instead of keyword matching. Lightweight alternative to heavy embedding models - zero external dependencies, <10ms search time. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 2933 次。

如何安装 Vector Memory Hack?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install vector-memory-hack」即可一键安装,无需额外配置。

Vector Memory Hack 是免费的吗?

是的,Vector Memory Hack 完全免费(开源免费),可自由下载、安装和使用。

Vector Memory Hack 支持哪些平台?

Vector Memory Hack 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Vector Memory Hack?

由 mig6671(@mig6671)开发并维护,当前版本 v1.0.3。

💬 留言讨论