by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's stated purpose (context budgeting) matches its instructions at a high level, but the included script and SKILL.md contain mismatches and risky assumptions (hard-coded user path, undeclared dependency on an 'openclaw' CLI, and instructions that delete/compact raw data) that warrant caution before installing.
评估建议
This skill appears to do what it says (manage context), but it contains unsafe assumptions and omissions. Before installing: (1) review and edit scripts/gc_and_checkpoint.sh — replace the hard-coded WORKSPACE with a configurable path and verify it points to the intended directory; (2) confirm the 'openclaw' CLI exists and is the correct binary, and add that as a declared dependency; (3) back up HOT_MEMORY.md and any large raw outputs — compaction can delete or permanently discard raw data; (4) t...详细分析 ▾
⚠ 用途与能力
The skill claims to manage context but the distributed artifacts reveal mismatches: the provided script invokes an 'openclaw' CLI and references a hard-coded workspace (/Users/yang/clawd), yet the registry metadata declares no required binaries or config paths. A context-budgeting tool plausibly needs an OpenClaw control mechanism, but the skill should declare that dependency and a configurable workspace path instead of embedding a specific user's path.
⚠ 指令范围
SKILL.md mandates creating/updating memory/hot/HOT_MEMORY.md and running the script to 'finalize compaction' and instructs removing large raw data after summarization. Those actions directly modify local session state and can cause loss of raw outputs if run incorrectly. The instructions also reference a 'Heartbeat' check and '/status' without specifying how to access that status endpoint or what privileges are required.
ℹ 安装机制
There is no install spec (instruction-only) which limits on-disk risk, but the included scripts/gc_and_checkpoint.sh will run locally and call external binaries. The lack of an install spec is not itself dangerous, but the script assumes the presence of an 'openclaw' command and a specific filesystem layout without declaring or installing them.
⚠ 凭证需求
The skill requests no environment variables or credentials, which superficially looks benign, but the script accesses a hard-coded absolute path and will read/write HOT_MEMORY.md under that workspace. This is disproportionate because the skill did not declare the need to access that path or the openclaw CLI; it therefore may unexpectedly touch user files. No secrets are requested, however.
ℹ 持久化与权限
The skill is not always-enabled and does not request persistent privileges. It does invoke session compaction via the OpenClaw CLI which alters agent/session state — a legitimate action for this skill — but combined with the undeclared dependency and hard-coded path, it increases the risk of unintended state changes.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/8
Initial release of the context-budgeting skill for OpenClaw agents. - Introduces a structured framework for managing context window usage, including partitioning information into objectives, history, decision logs, and background knowledge. - Implements mandatory pre-compression checkpointing with updates to `HOT_MEMORY.md` and automation via `gc_and_checkpoint.sh`. - Integrates an automated heartbeat mechanism to monitor context usage and trigger cleanup when limits are exceeded. - Aims to minimize token costs, reduce latency, and prevent memory loss during long-running sessions.
● 无害
安装命令
点击复制官方npx clawhub@latest install context-budgeting-v2
镜像加速npx clawhub@latest install context-budgeting-v2 --registry https://cn.longxiaskill.com