← Back to Skills Marketplace
Noverload - Knowledge Memory
by
drewautomates
· GitHub ↗
· v1.0.0
1912
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install noverload
Description
Give your agent a searchable knowledge brain - semantic search, topic synthesis, and action tracking across your saved YouTube videos, articles, Reddit threads, X posts, and PDFs
Usage Guidance
This skill appears to do what it says (connect your OpenClaw agent to your Noverload account), but there are a few things to check before installing:
- The SKILL.md requires a NOVERLOAD_TOKEN but the registry metadata doesn't list it — expect to provide that token in ~/.openclaw/openclaw.json or as an env var. Confirm token scope and be prepared to revoke it if needed.
- The skill runs `npx -y noverload-mcp@latest` at runtime, which downloads and executes the latest package from npm. That is convenient but runs remote code without a pinned version. If you care about supply-chain risk, ask the publisher to pin a specific version or provide a vetted package, or inspect the noverload-mcp package source before allowing the skill to run.
- By default the skill is read-only; only enable readOnly:false if you trust the agent's automated actions (it will be able to save URLs, add tags, and mark tasks in your Noverload account).
- Confirm the privacy claims with the vendor (where data is processed and what metadata is sent). If you want extra caution, create a limited-scope token or test with a sandbox account first.
Given the metadata omission and the runtime fetch-and-execute behavior, proceed only after verifying the token requirement and the npm package/version you will allow the agent to run.
Capability Analysis
Type: OpenClaw Skill
Name: noverload
Version: 1.0.0
The skill is classified as benign. It clearly defines its purpose as a knowledge management tool integrating with the Noverload service. The `SKILL.md` file explicitly details the execution of `npx -y noverload-mcp@latest` to run the Model Context Protocol (MCP) server, which is a standard method for distributing Node.js CLI tools. Crucially, the skill is configured for `readOnly: true` by default, enhancing security by preventing the agent from modifying user data without explicit user configuration. The documentation also includes clear privacy and security statements, and there are no signs of prompt injection attempts or instructions for malicious behavior within the provided files. The external dependency on `noverload-mcp` introduces a general supply chain risk, but the skill definition itself does not exhibit malicious intent.
Capability Assessment
Purpose & Capability
The skill name/description (personal knowledge memory, search, summaries) aligns with what the SKILL.md describes. The token-based access to a user's Noverload account is appropriate for this purpose. However, the registry metadata declares no required env vars or primary credential even though SKILL.md clearly requires an NOVERLOAD_TOKEN; that mismatch should be corrected.
Instruction Scope
SKILL.md instructs the agent to spawn an MCP helper via `npx -y noverload-mcp@latest` and to provide NOVERLOAD_TOKEN (via config). The instructions stay within the stated purpose (searching/saving your saved content), but they also describe optional write capabilities (readOnly: false) that allow the agent to save URLs, add tags, and complete action items in your external account — those are powerful actions and the user must explicitly enable them. The instructions do not ask the agent to read unrelated system files, but they do require placing a token in ~/.openclaw/openclaw.json or an env var.
Install Mechanism
There is no packaged install spec in the registry, but the skill's runtime instructs the agent to run `npx -y noverload-mcp@latest`. That will fetch and execute code from the public npm registry at runtime. Using `@latest` and `-y` means the agent will run the most recent package without an explicit pinned version or local review — this is moderate risk because arbitrary code will be downloaded and executed on demand. Prefer a pinned, reviewed release or an explicit install path.
Credentials
The skill needs a personal access token (NOVERLOAD_TOKEN) to access the user's Noverload account, which is proportionate to the described capability. But the skill metadata did not declare this required env var or a primary credential — that's an inconsistency. Also note that turning off read-only mode gives the agent write permissions to your external account, which is justified by the feature but should be enabled deliberately and with least privilege.
Persistence & Privilege
The skill is not always-enabled (always: false) and can be invoked by the user or autonomously by the agent (normal). It does not request persistent modifications to other skills or system-wide settings. The only notable privilege is the optional ability to let the agent write to your Noverload account (via readOnly:false) — that is a feature, not a hidden escalation, but it should be enabled knowingly.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install noverload - After installation, invoke the skill by name or use
/noverload - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Noverload 1.0.0 - Initial release for OpenClaw
- Adds semantic search, synthesis, and action tracking across saved YouTube videos, articles, Reddit threads, X posts, and PDFs.
- Enables AI-powered summaries, topic synthesis, framework extraction, and action item tracking from your knowledge library.
- Supports secure, read-only integration by default; option to allow saving/tagging new content.
- Fully documented command set for searching, synthesizing, extracting, tracking, and saving content.
- Compatible with OpenClaw using a personal access token for authentication.
- Free, Pro, and Trial plans supported; MCP/API features require Pro or Trial.
Metadata
Frequently Asked Questions
What is Noverload - Knowledge Memory?
Give your agent a searchable knowledge brain - semantic search, topic synthesis, and action tracking across your saved YouTube videos, articles, Reddit threads, X posts, and PDFs. It is an AI Agent Skill for Claude Code / OpenClaw, with 1912 downloads so far.
How do I install Noverload - Knowledge Memory?
Run "/install noverload" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Noverload - Knowledge Memory free?
Yes, Noverload - Knowledge Memory is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Noverload - Knowledge Memory support?
Noverload - Knowledge Memory is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Noverload - Knowledge Memory?
It is built and maintained by drewautomates (@drewautomates); the current version is v1.0.0.
More Skills