brain 大脑

The scripts implement the described features (confidence scoring, checkpoints, 'capsules', semantic recall helper, watchdog and subagent routing). However the packaging declares no required binaries while several scripts expect a Node environment and the 'openclaw' CLI (sessions_spawn) to exist; that dependency is not declared in the skill metadata/instructions.

Runtime instructions (SKILL.md) tell you to copy scripts into your skills/workspace and to add SNAPSHOT.md and 工作缓冲区.md to bootstrapExtraFiles so their contents are injected into agent context. The scripts read and write files under $HOME/.openclaw/workspace (SNAPSHOT.md, 工作缓冲区.md, logs, capsules directory) and will publish assembled injection JSON to stdout. This legitimately supports the stated purpose, but it also means potentially sensitive workspace content will be programmatically read and included in agent contexts — and some wrappers allow execution of arbitrary shell commands when invoked.

No automated install spec — instruction-only plus scripts that you copy manually. This is lower install risk (nothing downloaded at runtime). The user is required to manually copy scripts into their environment, which gives them a chance to inspect files before use.

No environment variables or credentials are declared or requested, which aligns with a local, file-based memory system. However the code assumes process.env.HOME, a Node runtime, and an 'openclaw' CLI binary; those runtime dependencies are not listed. There are no network endpoints or secret-exfiltration hooks in the code, but the scripts will read whatever is in your workspace snapshot/buffer (which may contain secrets) and can write logs and capsule files to your HOME.

always:false (good). The skill writes and updates files under ~/.openclaw/workspace (buffers, snapshots, logs, capsule files) and instructs adding files to bootstrapExtraFiles so they become part of agent context — this is persistent and intended, but you should be aware it modifies your workspace files and will cause their contents to be injected into agent prompts.