Vector Mind Map Fusion

L1→L2→L3 向量记忆融合系统。用于构建、查询和管理语义记忆图谱。当用户需要提取、加工、记忆、或检索结构化知识时触发。具体场景：(1) 用户说"记住"、"存入记忆"、"这个很重要" → L1 提取；(2) 用户问"之前有没有"、"有没有记录过"、"我的记忆里" → L2+L3 查询；(3) 用户要求"整理一下...

This skill appears to implement the memory-extraction/recall system it claims, but review and precautions are recommended before installing: - Data scope: it scans your OpenClaw session files and writes persistent memory files (brain.db and InfinityDB files). If your sessions contain secrets (passwords, API keys, tokens, private notes), those may be extracted and stored. Consider running in a sandbox, or set SESSIONS_DIR to a safe test directory. - File locations: default storage includes ~/.local/share/neural-memory and an absolute '/workspace/fusion/...' path in code. Confirm and override these paths in the config before running so it doesn't write to unexpected locations. - Pickle risk: the HNSW index is saved/loaded using pickle. Loading pickled files from untrusted sources can execute arbitrary code. Only run this skill on data you control, and avoid using existing brain.hnsw files from unknown origins. - External install commands: SKILL.md asks you to run 'curl https://ollama.com/install.sh | sh' and 'pip install --break-system-packages'. 'curl | sh' and '--break-system-packages' have system-level effects—inspect the installer script and avoid the pip flag if you don't want pip to alter system packages. - Secrets handling: the l1 classifier will detect and classify 'password/secret/token/api_key' text; but there is no obvious automatic redaction before storing. If you need to avoid persisting secrets, add filtering or prevent the skill from scanning live session directories. - Actionable steps: (1) Review the code (esp. src/infinitydb_lite.py, l1_classifier and paths in config); (2) run the skill in an isolated environment or container; (3) set SESSIONS_DIR and NEURALMEMORY_DIR to controlled test directories; (4) remove or audit any existing brain.hnsw before loading; (5) avoid blindly executing the suggested curl | sh installer and the pip flag without inspection. If you want, I can point out exact lines/files that implement the session scanning, brain DB write paths, and pickle load/save calls so you can inspect them more easily.

Type: OpenClaw Skill Name: vector-mind-map-fusion Version: 1.2.4 The 'vector-mind-map-fusion' bundle is a sophisticated three-layer memory management system (L1 extraction, L2 consolidation, L3 retrieval) designed for the OpenClaw agent. It utilizes local Ollama instances for embeddings and implements a custom 'InfinityDB-lite' for graph and vector storage. While the system accesses sensitive local data such as session logs in `~/.openclaw/` and credentials for Feishu (Lark) reporting in `src/l3/l3_cron.py`, these actions are consistent with its stated purpose of managing agent memory and providing status updates. The use of `curl | sh` in `start.sh` for Ollama installation is a common but risky practice, yet there is no evidence of malicious intent, data exfiltration of actual memory content, or unauthorized persistence mechanisms.