首页龙虾技能列表 › Recall Local — 技能工具

Recall Local — 技能工具

v1.0.0

Local memory search for OpenClaw agents. Runs a lightweight Node.js server that indexes all files in ~/clawd/memory/ plus MEMORY.md and WORKING.md, then expo...

0· 156·0 当前·0 累计
by @wrentheai·MIT-0
下载技能包
License
MIT-0
最后更新
2026/4/10
安全扫描
VirusTotal
可疑
查看报告
OpenClaw
可疑
high confidence
The skill is essentially what it says (a local Node.js memory-search server) but there are several mismatches and a network-exposure/instructional risk you should understand before installing.
评估建议
The code does what it says (indexes ~/clawd memory files and serves a search UI), but before installing: 1) verify you have Node.js and update the LaunchAgent path or run the server manually; the skill metadata failing to declare Node as a required binary is an oversight. 2) The server binds to 0.0.0.0 (accessible from your LAN) even though the README emphasizes localhost—if you want local-only access change server.listen to '127.0.0.1' or firewall the port. 3) Inspect scripts/server.js yourself...
详细分析 ▾
用途与能力
The code implements a local search over ~/clawd/memory, MEMORY.md, and WORKING.md which matches the declared purpose. However the SKILL.md and runtime clearly require Node.js to run, yet requires.binaries lists none; that's an incoherence. Also SKILL.md uses macOS launchctl/LaunchAgent but the skill metadata does not declare an OS restriction.
指令范围
Instructions tell the agent/user to copy the bundled server.js into ~/clawd/tools/recall-local and install a macOS LaunchAgent that will run node at login. The runtime reloads and indexes all files in the stated memory locations (expected) but the SKILL.md claims the service is at 'localhost' while the server binds to '0.0.0.0' making it reachable from the local network — a meaningful discrepancy that increases exposure. The instructions also assume paths (e.g. /opt/homebrew/bin/node) and require replacing YOUR_USERNAME, but do not check for Node or platform.
安装机制
There is no automated install spec (instruction-only), and the code is small and included in the package. This is lower-risk than remote downloads, but the instructions require the user to copy files and create a LaunchAgent — the install is manual and could be done incorrectly.
凭证需求
No credentials or env vars are requested (appropriate). However the server listening on 0.0.0.0 (not limited to 127.0.0.1) exposes indexed memory to other devices on the local network; the SKILL.md's text erroneously emphasizes 'nothing leaves your machine' without highlighting LAN exposure. Also Node is required but not declared.
持久化与权限
The SKILL.md instructs creating a LaunchAgent in ~/Library/LaunchAgents to run at login and keep alive — this gives the skill per-user persistence (starts automatically on login). It's user-scoped and not an 'always' system-level privilege, but you should be aware it modifies your per-user startup items.
scripts/server.js:22
File read combined with network send (possible exfiltration).
安全有层次,运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发,无需署名。

运行时依赖

无特殊依赖

版本

latestv1.0.02026/3/18

- Initial release of recall-local: a local memory search tool for OpenClaw agents. - Indexes all files in ~/clawd/memory/ (plus MEMORY.md and WORKING.md) and provides fast keyword search. - Runs a lightweight Node.js server with both web UI and API at http://localhost:3456. - No external dependencies—everything stays on your machine, no API keys required. - Includes setup instructions for launch-on-login and manual start options. - Web interface and API support searching agent logs, session history, and decisions.

● 可疑

安装命令 点击复制

官方npx clawhub@latest install recall-local
镜像加速npx clawhub@latest install recall-local --registry https://cn.clawhub-mirror.com

技能文档

Indexes your entire ~/clawd/memory/ archive and serves it as a searchable web UI + API at http://localhost:3456. No external services, no API keys, nothing leaves your machine.

Setup (first time)

# Copy the server to your tools directory
mkdir -p ~/clawd/tools/recall-local
cp "$(dirname "$0")/scripts/server.js" ~/clawd/tools/recall-local/server.js

# Create a LaunchAgent so it starts on login cat > ~/Library/LaunchAgents/ai.wren.recall-local.plist << 'EOF' Labelai.wren.recall-local ProgramArguments /opt/homebrew/bin/node /Users/YOUR_USERNAME/clawd/tools/recall-local/server.js RunAtLoad KeepAlive StandardOutPath/Users/YOUR_USERNAME/clawd/tools/recall-local/recall.log StandardErrorPath/Users/YOUR_USERNAME/clawd/tools/recall-local/recall.log EOF

# Replace YOUR_USERNAME, then load it launchctl load ~/Library/LaunchAgents/ai.wren.recall-local.plist

Or just run it manually: node ~/clawd/tools/recall-local/server.js &

Search (agent use)

curl -s "http://localhost:3456/search?q=YOUR+QUERY" | python3 -c "
import json,sys
d = json.load(sys.stdin)
print(f'{d[\"total\"]} chunks indexed')
for r in d['results'][:5]:
    print(f'[{r[\"source\"]}] {r[\"text\"][:300]}')
    print()
"

Check if running / start if down

curl -s http://localhost:3456/search?q=test > /dev/null 2>&1 && echo "UP" || (echo "Starting..."; launchctl start ai.wren.recall-local; sleep 2)

Human UI

Open http://localhost:3456 in a browser. Search box, results below. Works on mobile too if on same local network.

Tips

  • Reloads all files on every search — always reflects the latest memory
  • Source filenames are dates (2026-03-01.md) — useful for spotting when something happened
  • Multi-word queries score better than single words
  • For broad questions use general terms; for specific lookups use exact terms
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制

了解定制服务