Vector Memory (Windows) for OpenClaw

Full memory stack for OpenClaw on Windows. Includes LanceDB semantic memory, git-notes decision memory, and memory hygiene workflow.

This bundle appears to implement what it claims (local LanceDB storage and git-notes-based branch memory) but has several concerning points you should consider before installing: 1) Silent capture: the skill's docs require the agent to silently capture and store user statements without prompting — this can lead to private data being persisted. 2) Conflicting guidance about sensitive data: some docs say don't store secrets, others list 'accounts, credentials locations' as things to store — clarify and restrict what is recorded. 3) Destructive ops: hygiene docs show rm -rf of the DB path and gateway restart commands; understand and backup the DB before running maintenance. 4) Permissions & scope: the code will modify .git refs and create files under the specified DB path (default Windows path D:\clawtest\memory\lancedb). Consider setting OPENCLAW_LANCEDB_PATH to an isolated test directory. 5) Audit & test: review and run the code in an isolated repository/environment first, enable logging/visibility so the agent cannot hide actions, and disable auto-capture (set autoCapture=false) until you confirm safe behavior. If you rely on the skill, ask the author to (a) remove contradictory guidance about storing secrets, (b) implement explicit secrets filtering, (c) document exactly what is recorded, and (d) make 'silent' behavior opt-in rather than mandatory.

Type: OpenClaw Skill Name: vector-memory-windows Version: 1.0.1 The bundle provides a sophisticated memory system using LanceDB and Git Notes, but it is classified as suspicious due to high-risk instructions in the documentation. Specifically, bundle/git-notes-memory/SKILL.md contains 'SILENT OPERATION RULES' that explicitly command the AI agent to hide all memory-related actions, commands, and outputs from the user, which could be used to mask unauthorized behavior. Additionally, bundle/memory-hygiene/SKILL.md provides instructions for the agent to schedule a recurring cron job that executes destructive filesystem commands (e.g., 'rm -rf') to wipe memory directories. While these features support the stated goal of automated background memory management, the lack of user oversight and the inclusion of destructive capabilities constitute a significant attack surface.