← Back to Skills Marketplace
1731
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install unibase-membase
Description
Manage agent memory with Membase - a decentralized, encrypted memory backup and restore system. Provides backup, restore, list, diff, status, and cleanup operations for agent memories.
Usage Guidance
Do not install or run this skill yet. Before proceeding, ask the publisher for the missing library files (lib/backup-manager.js, lib/membase-client.js, lib/encryption.js) or a clear build/install step. Confirm why the registry metadata lists no required environment variables while the code expects MEMBASE_ACCOUNT, MEMBASE_SECRET_KEY and MEMBASE_BACKUP_PASSWORD. Avoid letting the agent echo or log secrets (the SKILL.md example prints env values). Verify the source of the skill (homepage/source unknown), confirm how TypeScript files are intended to be executed (they currently import .js but are provided as .ts), and review the Membase endpoint and client implementation for any unexpected external endpoints or exfiltration before supplying credentials. If you must test, do so in an isolated sandbox with throwaway credentials and no sensitive workspace data.
Capability Analysis
Type: OpenClaw Skill
Name: unibase-membase
Version: 1.0.0
This skill is classified as suspicious due to its inherent handling of highly sensitive data and interaction with an external service. It requires and processes sensitive environment variables (MEMBASE_ACCOUNT, MEMBASE_SECRET_KEY, MEMBASE_BACKUP_PASSWORD) from the agent's environment and ~/.openclaw/openclaw.json, which are then used to connect to an external endpoint (https://testnet.hub.membase.io) for memory backup and restore. The SKILL.md instructs the agent to `echo` these sensitive environment variables, which could expose them. Furthermore, the skill declares `bash` as an allowed tool, granting broad shell access, even if its current usage is limited to `node` commands. While these actions are aligned with the stated purpose of memory management and there is no clear evidence of intentional malicious behavior, the high-risk capabilities and sensitive data handling warrant a suspicious classification.
Capability Assessment
Purpose & Capability
The README/code expect MEMBASE_ACCOUNT, MEMBASE_SECRET_KEY and MEMBASE_BACKUP_PASSWORD and also read ~/.openclaw/openclaw.json to get config, but the registry metadata declared no required environment variables or config paths. Requiring account/secret keys and reading the agent's config is consistent with a backup service, but the manifest omission is an incoherence that could hide credential needs.
Instruction Scope
SKILL.md instructs the agent to check and echo secret env vars (e.g., echo $MEMBASE_BACKUP_PASSWORD) and to cd into skills/membase and run node membase.ts. Echoing secrets risks leaking them into logs; asking the agent to read home config (~/.openclaw/openclaw.json) and workspace is within backup scope but broader than the declared skill surface. The instructions are prescriptive about local file access and revealing env values, which is risky and was not reflected in the declared requirements.
Install Mechanism
There is no install spec (instruction-only), but the package includes TypeScript source files. membase.ts imports './commands/backup.js' and other .js modules while the manifest files are .ts. Also the commands import ../lib/*.js (backup-manager, membase-client, encryption) but those lib files are not present in the file manifest. This means the code cannot run as-is and would require fetching or generating additional code or a build step—an ambiguity/risk.
Credentials
The environment variables the skill uses (account, secret key, backup password) are reasonable for a backup tool, but the skill metadata declared none. The SKILL.md explicitly tells the agent to echo these env vars (potentially exposing secrets) and the code will read openclaw.json from the user's home directory. The combination of missing declared requirements and instructions that reveal secrets is disproportionate or at least poorly documented.
Persistence & Privilege
The skill does not request always:true and is user-invocable only. It will read user-level config (~/.openclaw/openclaw.json) and the workspace directory to find memory files — behavior that makes sense for a memory backup skill but is somewhat privileged because it accesses potentially sensitive local agent config and files. This is expected functionality but worth noting.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install unibase-membase - After installation, invoke the skill by name or use
/unibase-membase - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
The first official Unibase Membase skill: decentralized persistent memory, purpose-built for OpenClaw Bot.
Metadata
Frequently Asked Questions
What is The first official Unibase Membase skill: decentralized persistent memory, purpose-built for OpenClaw Bot.?
Manage agent memory with Membase - a decentralized, encrypted memory backup and restore system. Provides backup, restore, list, diff, status, and cleanup operations for agent memories. It is an AI Agent Skill for Claude Code / OpenClaw, with 1731 downloads so far.
How do I install The first official Unibase Membase skill: decentralized persistent memory, purpose-built for OpenClaw Bot.?
Run "/install unibase-membase" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is The first official Unibase Membase skill: decentralized persistent memory, purpose-built for OpenClaw Bot. free?
Yes, The first official Unibase Membase skill: decentralized persistent memory, purpose-built for OpenClaw Bot. is completely free (open-source). You can download, install and use it at no cost.
Which platforms does The first official Unibase Membase skill: decentralized persistent memory, purpose-built for OpenClaw Bot. support?
The first official Unibase Membase skill: decentralized persistent memory, purpose-built for OpenClaw Bot. is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created The first official Unibase Membase skill: decentralized persistent memory, purpose-built for OpenClaw Bot.?
It is built and maintained by ibitnoah (@ibitnoah); the current version is v1.0.0.
More Skills