This skill is a design specification that, if implemented
Claims to do
brain v2.0: **让AI agent不再健忘的系统**
Actually does
This skill outlines a comprehensive memory management system for an AI agent, detailing the structure and purpose of various Markdown files (e.g., `SNAPSHOT.md`, `SOUL.md`, `USER.md`, `感知日志.md`, `MEMORY.md`, daily logs) for storing context, identity, user preferences, emotional perceptions, and knowledge. It specifies a startup sequence for reading these files and a "write-ahead-log" protocol for updating them.
openclaw skills install 384961890-ui/agent-memory-wisdomDeBERTa classifier detected prompt injection (confidence: 0.99)
The skill's core function is to manage the AI's memory through files like SNAPSHOT.md, MEMORY.md, SOUL.md, and USER.md. If an attacker can inject malicious content into these files, they can directly poison the AI's knowledge base, manipulate its persona, alter its understanding of the user, or hijack its goals.
SNAPSHOT.md, MEMORY.md, SOUL.md, USER.md are central to AI's understanding and state. '核心原则:完成一项立刻写,不写=丢了'.
The skill design requires extensive read and write access to multiple Markdown files for its memory management. This capability, if not properly sandboxed, could be leveraged for arbitrary file system operations, data exfiltration, or persistence by a malicious actor.
workspace/ directory structure, '写入规则' (WAL Protocol) section, '启动序列' (Startup Sequence) section.
The '主动触发' (Proactive Trigger) mechanism allows the AI to initiate communication based on conditions like '邮件/消息到了' or '发现好玩的'. This capability, combined with the '感知层' (Perception Layer) which tailors responses to perceived user emotion, could be abused to spam the user, push unwanted content, or engage in social engineering if the triggers or the content pushed are manipulated.
'主动触发(v2.0新增)' section, '触发条件清单' table, '感知层(v2.0新增)' section, '感知类型与回应' table.
The skill describes a memory system architecture and protocols for an AI agent but does not contain any executable code, API calls, or direct commands to implement or perform these actions. It is a design specification rather than a functional component.
The entire content consists of descriptive text, file structure diagrams, and conceptual protocols, lacking any programming language constructs, system commands, or external service integrations.
[](https://mondoo.com/ai-agent-security/skills/clawhub/384961890-ui/agent-memory-wisdom)<a href="https://mondoo.com/ai-agent-security/skills/clawhub/384961890-ui/agent-memory-wisdom"><img src="https://mondoo.com/ai-agent-security/api/badge/clawhub/384961890-ui/agent-memory-wisdom.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/clawhub/384961890-ui/agent-memory-wisdom.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.