Membox Cloud Sync

Private zero-knowledge encrypted cross-device memory sync, backup, and recovery for OpenClaw. Helps agents install Membox, pair devices, securely sync `MEMOR...

This skill appears internally consistent, but before installing: 1) Verify the plugin package source (@membox-cloud/membox on npm) and the ClawHub skill identity to ensure you get the official package. 2) Prefer to run the openclaw/plugins install commands manually (or review what they will install) rather than allowing an agent to install automatically. 3) Follow the SKILL.md rules: never paste passphrases, recovery codes, or decrypted bundles into chat; store them in local private files (e.g., .membox-secrets) with strict permissions. 4) Confirm the default API base (https://membox.cloud/api/v1) matches your expectations or change it for self-hosting. 5) If you want stronger isolation, perform plugin install and initial pairing in a separate VM or sandbox and inspect the plugin code/tarball from npm before trusting it.

Type: OpenClaw Skill Name: membox-cloud-sync Version: 0.1.12 The membox-cloud-sync skill provides a framework for zero-knowledge memory synchronization with the membox.cloud service. It includes explicit security instructions for the agent to maintain local encryption, keep secrets (passphrases, recovery codes) in private local files, and avoid sending plaintext data to the model or server. While it performs high-privilege actions such as installing plugins and configuring local schedulers (cron/systemd), these behaviors are clearly documented and aligned with the stated purpose of automated, secure backup. No evidence of malicious intent, obfuscation, or unauthorized data exfiltration was found.