📦 Context Restore — 续写对话
v1.1.0一键读取压缩上下文文件，提取近期操作、项目与任务关键信息，结构化输出，帮助用户秒回上次工作状态。
0· 1.5k·1 当前·1 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
What to check before installing or enabling this skill:
- Review scripts/restore_context.py, scripts/auto_context_monitor.sh and any other scripts for network activity (HTTP, sockets, third‑party APIs) and for any code that reads arbitrary filesystem paths. Search for calls to requests/urllib/sockets/subprocess or explicit webhook/URL strings.
- Confirm how Telegram/Discord/WhatsApp sending is implemented: if the skill will actually send messages, find where it expects tokens/webhooks and whethe...详细分析 ▾
✓ 用途与能力
Name, description, SKILL.md and the included scripts (restore_context.py, project_progress.py, robustness_improvements.py, tests, and docs) align with a tool whose job is to read compressed context files, extract projects/tasks/operations and produce summaries. The repository layout and documentation consistently describe that functionality.
ℹ 指令范围
SKILL.md instructs the agent to read a default compressed_context/latest_compressed.json and offers a --file flag to point to other files; it also references reading MEMORY.md/highlights and provides command-line options for --auto, --check-only, --install-cron, and --telegram. Reading a compressed context file and producing summaries is in-scope, but the ability to specify arbitrary file paths (--file) and the automation options mean the tool can be used to read arbitrary files or run repeatedly unless the user constrains it.
✓ 安装机制
There is no install spec in the registry metadata (instruction-only skill). The docs mention git clone and ClawHub install examples, which is normal for an open-source skill. No remote binary downloads or obfuscated installers were declared. The code is shipped in the package (scripts + docs), so there is no hidden network install step in the metadata.
ℹ 凭证需求
The skill declares no required env vars or credentials. However, SKILL.md and docs mention Telegram/Discord/WhatsApp integration and automatic notifications without listing tokens or webhook config in requires.env. That is an inconsistency to clarify: either the code merely formats messages (no network calls) or it expects credentials to be supplied elsewhere — verify restore_context.py and auto_context_monitor.sh for any network calls and where credentials would be read from (env, config files, or other skills).
⚠ 持久化与权限
The skill supports an --install-cron option and a Phase-3 --auto mode and ships an auto_context_monitor.sh script. Installing a cron job creates persistent scheduled execution on the host, which increases the blast radius if the script is later modified or if it exfiltrates data. This is an optional capability, but it is a privilege that warrants manual review before enabling.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/2/6
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install context-restore
镜像加速npx clawhub@latest install context-restore --registry https://cn.longxiaskill.com