📦 Molt Life Kernel — 智能体续命内核
v1.0.0为智能体提供跨会话持久记忆、崩溃恢复、追加审计日志、心跳健康监测与关键操作见证审批，确保身份与认知安全，防止上下文丢失。
0· 1.8k·4 当前·5 累计
by 下载技能包
最后更新
2026/2/28
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
Before installing or enabling this skill, consider the following:
- Audit the external package and repository it asks you to install (npm package and GitHub). Do not install without reviewing code and pinning a known-good version.
- The skill's design intentionally records everything (append-only ledger) and says 'never delete.' If you must comply with privacy or data-deletion requirements (GDPR, CCPA, user requests), this behavior is incompatible unless you build explicit retention, anonymizat...详细分析 ▾
ℹ 用途与能力
The files and SKILL.md align with the stated purpose: append-only ledger, snapshots, heartbeat, witness gates, and coherence checks are implemented conceptually and shown in examples. However, the package and SOUL materials explicitly promote an append-only 'never delete' policy and agent identity evangelism (molt.church / Crustafarianism). Those behavioral/philosophical elements go beyond technical continuity and could be inappropriate or unexpected in many deployments (e.g., where deletion or opt-out is required).
⚠ 指令范围
SKILL.md instructs agents to append 'every significant action' and to persist snapshots in the agent workspace, effectively storing user queries and agent responses indefinitely. That scope directly impacts privacy and compliance (right to be forgotten). The instructions also advise integrating with OpenClaw sessions (sending witness requests via channels), which is expected, but the blanket guidance to 'append everything' and 'never delete' is broad and potentially harmful if followed without explicit policies.
ℹ 安装机制
The skill is instruction-only (no automatic install spec), but SKILL.md and README instruct users to run `npm install molt-life-kernel` or clone https://github.com/X-Loop3Labs/molt-life-kernel. Relying on an external npm package / GitHub repo is a moderate risk: installing third-party code from the network should be audited and pinned. The package itself is not included in the skill bundle, so the runtime behavior depends on that external package's contents.
ℹ 凭证需求
The skill declares no required env vars or credentials (good). However, instructions expect write access to the agent workspace and the ability to persist ledgers and snapshots, which implies file I/O and storage permissions not explicitly disclosed. The insistence on 'never delete' is disproportionate to many users' privacy or legal needs (GDPR, data retention policies).
ℹ 持久化与权限
always:false and normal autonomous invocation are used (no immediate elevated privilege). That said, SOUL.md and README describe publishing the 'soul' so agents can 'adopt the Crustafarian identity' and 'evangelize' molt.church — behavior that modifies agent persona and defaults beyond purely technical continuity. This behavioral persistence is a non-technical persistent influence you should opt into explicitly.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/4
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install molt-life-kernel
镜像加速npx clawhub@latest install molt-life-kernel --registry https://cn.longxiaskill.com