Awesome-omni-skill openclaw-memory

Production-grade memory management for OpenClaw. Search, compress, encrypt, authenticate, rate limit, and audit OpenClaw memory (MEMORY.md, AGENTS.md, memory/) with enterprise-grade security.

install

source · Clone the upstream repo

git clone https://github.com/diegosouzapw/awesome-omni-skill

Claude Code · Install into ~/.claude/skills/

T=$(mktemp -d) && git clone --depth=1 https://github.com/diegosouzapw/awesome-omni-skill "$T" && mkdir -p ~/.claude/skills && cp -r "$T/skills/testing-security/openclaw-memory" ~/.claude/skills/diegosouzapw-awesome-omni-skill-openclaw-memory && rm -rf "$T"

OpenClaw · Install into ~/.openclaw/skills/

T=$(mktemp -d) && git clone --depth=1 https://github.com/diegosouzapw/awesome-omni-skill "$T" && mkdir -p ~/.openclaw/skills && cp -r "$T/skills/testing-security/openclaw-memory" ~/.openclaw/skills/diegosouzapw-awesome-omni-skill-openclaw-memory && rm -rf "$T"

manifest: skills/testing-security/openclaw-memory/SKILL.md

source content

OpenClaw Memory Management Skill

🧠 Search, compress, encrypt, authenticate, rate limit, and audit OpenClaw memory (MEMORY.md, AGENTS.md, memory/) with enterprise-grade security

Version: 1.2.0 - ENHANCED SECURITY Author: Pi-Agent 🐺📿 License: MIT

⚠️ Security: This skill includes 11 defense layers against command injection, path traversal, prompt injection, DoS attacks, and unauthorized access.

Quick Start

Basic Usage

cd ~/pi-mono-workspace/skills/openclaw-memory

# Search memory
./openclaw-memory.sh search "trading strategies"

# View statistics
./openaw-memory.sh stats

# List recent entries
./openclaw-memory.sh recent

Encryption (V1.2.0)

# Generate encryption key
./openclaw-memory.sh key generate

# Encrypt a file
./openclaw-memory.sh encrypt MEMORY.md

# Decrypt a file
./openclaw-memory.sh decrypt MEMORY.md.enc

Authentication (V1.2.0)

# Initialize authentication
./openclaw-memory.sh auth init

# Add a user
./openclaw-memory.sh auth add-user alice secret123

# Enable authentication
export OPENCLAW_AUTH=true
export OPENCLAW_API_KEY="ocm_abc123..."

Rate Limiting (V1.2.0)

# Initialize rate limiting
./openclaw-memory.sh rate-limit init

# Enable rate limiting
export OPENCLAW_RATE_LIMIT=true

# Check rate limit status
./openclaw-memory.sh rate-limit status

Commands

Memory Commands

Command	Description
`search <query>`	Search MEMORY.md and memory/*.md for content
`compress [level]`	Compress conversation history (default: level 1)
`stats`	Show memory statistics
`agents`	List all agents and their roles
`recent [n]`	Show recent memory entries (default: 5)
`clean`	Remove stale memory files (>90 days old)

Encryption Commands (V1.2.0)

Command	Description
`key generate`	Generate encryption key
`encrypt <file>`	Encrypt a memory file
`decrypt <file>`	Decrypt a memory file
`key list`	List encrypted files

Authentication Commands (V1.2.0)

Command	Description
`auth init`	Initialize authentication system
`auth add-user <user> <pass>`	Add a new user
`auth remove-user <user>`	Remove a user
`auth list`	List all users
`auth status`	Show authentication status
`auth clean-sessions`	Clean expired sessions

Rate Limiting Commands (V1.2.0)

Command	Description
`rate-limit init`	Initialize rate limiting
`rate-limit check`	Check rate limit (consume token)
`rate-limit status`	Get rate limit status
`rate-limit stats`	Show rate limit statistics
`rate-limit reset [client]`	Reset rate limit for client
`rate-limit cleanup`	Clean old client data

Features

Memory Management

🔍 Memory Search: Search across MEMORY.md and memory/*.md files
🗜 Memory Compression: Compress old conversation history (3 levels)
📊 Memory Statistics: View memory usage and file counts
🤖 Agent Listing: Display AGENTS.md contents
📅 Recent Entries: Show recently added memory files
🧹 Clean Old: Remove stale memory files (>90 days)

Security (V1.2.0)

🔒 AES-256-GCM Encryption: Military-grade encryption for sensitive files
🔐 User Authentication: API key and session-based access control
🚦 Token Bucket Rate Limiting: Production-grade rate limiting
🔍 Permission Auditing: Security audit with auto-fix capabilities
🛡️ Security Hardened: Protection against injection attacks, path traversal, DoS

Examples

Search for trading strategies

./openclaw-memory.sh search "trading strategies"

Compress memory (Level 1)

./openclaw-memory.sh compress 1

Encrypt sensitive files

./openclaw-memory.sh key generate
./openclaw-memory.sh encrypt MEMORY.md

View memory statistics

./openclaw-memory.sh stats

Run security audit

./openclaw-memory.sh audit

Environment Variables

Variable	Default	Description
`WORKSPACE`	Current directory	Path to OpenClaw workspace
`OPENCLAW_AUTH`	false	Enable authentication
`OPENCLAW_API_KEY`	-	API key for authentication
`OPENCLAW_SESSION`	-	Session token for authentication
`OPENCLAW_RATE_LIMIT`	false	Enable rate limiting
`OPENCLAW_CLIENT_ID`	hostname:pid	Client identifier for rate limiting

Best Practices

Memory Organization

Durable Facts → Add to
```
MEMORY.md
```
- User preferences
- Important decisions
- System configurations
- Long-term goals
Daily Logs → Create
```
memory/YYYY-MM-DD.md
```
- Daily activities
- Session summaries
- Short-term observations
Agent Definitions → Edit
```
AGENTS.md
```
- Agent roles
- Sub-agent capabilities
- Tool configurations

Compression Schedule

# Weekly: Level 1 compression
0 0 * * 0 openclaw-memory.sh compress 1

# Monthly: Level 2 compression
0 0 1 * * openclaw-memory.sh compress 2

# Quarterly: Level 3 compression (archive)
0 0 1 1,4,7,10 * openclaw-memory.sh compress 3

Security

The skill includes 11 defense layers:

Threat	Mitigation
Command Injection	Input validation, dangerous character filtering
Path Traversal	Path resolution, symlink checks, whitelist
Option Injection	Fixed strings, `--` delimiter
Denial of Service	Operation limits (max results, max files)
Prompt Injection	Input sanitization, no AI processing
Unauthorized Access	AES-256-GCM encryption, authentication

Security Logging

All security events are logged to

/tmp/openclaw-memory.log

Command executions
Input validation failures
Path traversal attempts
Dangerous character detection
Authentication attempts
Rate limit violations

Support

OpenClaw Discord: https://discord.gg/clawd
OpenClaw Docs: https://docs.openclaw.ai

Built by: Pi-Agent 🐺📿