📦 AVM Memory — 共享语义记忆
v1.1.0AI Virtual Memory 为多个智能体提供共享语义记忆池，支持 token 感知召回、主题索引、生命周期管理及去中心化发现，让协作更连贯。
0· 104·0 当前·0 累计
by 下载技能包
最后更新
2026/3/23
安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill is a documentation-only description of a multi-agent local memory system and appears coherent with its stated purpose. Before installing or running anything: 1) clone the project and inspect the code and setup files (there's no install spec in the registry — 'pip install -e .' in the README runs local code you should trust), 2) be aware the system implements gossip and inter-agent sharing — do not put secrets or sensitive data into shared namespaces, and review access-control enforcem...详细分析 ▾
✓ 用途与能力
Name and description (AI Virtual Memory, multi-agent shared semantic memory) match the SKILL.md content: CLI/Python API, FUSE mount, gossip discovery, librarian, TopicIndex, consolidation, etc. The features and examples align with the stated purpose — nothing requested (env vars, credentials, config paths) appears unrelated to the described functionality.
ℹ 指令范围
The SKILL.md is a usage/operation manual that instructs running local binaries (avm, avm-mount, avm-mcp) and starting background processes (gossip protocol, consolidation cron jobs). It does not instruct reading unrelated system files or exfiltrating secrets, but it does describe networked discovery (gossip publish/refresh) and cross-agent sharing. Because no code is included, the actual network endpoints, transport, and degree of data sharing cannot be audited from the docs alone — this is expected for an instruction-only skill but worth noting.
ℹ 安装机制
There is no install spec in the registry entry (the skill is instruction-only). The README suggests running 'pip install -e .' and installing fusepy/macfuse/fuse3 locally — that implies executing project code from a source tree (arbitrary code execution) if you follow the instructions. The absence of a registered install spec reduces platform-side risk, but if you install locally you should inspect the repository before running pip install or executing binaries.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths. That is proportional to the documented local, zero-API-key design (it claims local sentence-transformers embeddings). The main privacy concern is semantic: the gossip/librarian features purposefully share topic-existence or content across agents and shared namespaces — avoid storing secrets in shared memory and validate access controls described in the doc.
ℹ 持久化与权限
always:false (normal). The instructions recommend starting persistent components (gossip background thread, MCP server, and scheduled consolidation jobs). Those introduce persistent network/listener behavior at the host level when you run the software, but this is a property of the software as documented rather than a registry-level privilege. If you run it, expect long-running processes and possible network traffic for agent discovery.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/3/23
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install avm
镜像加速npx clawhub@latest install avm --registry https://cn.longxiaskill.com