LanceDB Hybrid Search Memory Plugin

LanceDB long-term memory plugin with BM25 + vector hybrid search (RRF or linear reranking).

This plugin appears to implement the claimed hybrid LanceDB memory functionality, but proceed with caution: 1) The registry metadata does not declare required environment credentials, yet the plugin requires an OpenAI embedding API key via its config (e.g. ${OPENAI_API_KEY}). Expect to provide that key. 2) Installing requires running npm install in the plugin folder — review package.json/package-lock.json and be aware npm will fetch native optional packages for LanceDB. 3) The plugin intentionally overrides the bundled memory plugin by keeping the id "memory-lancedb"; this replaces the built-in implementation when you add the plugin path. Back up your OpenClaw config and existing memory DB (~/.openclaw/memory/lancedb) before enabling. 4) If you don't trust the source (no homepage or upstream repo provided), consider running it in a disposable/test environment, manually review the full index.ts (to ensure no hidden network endpoints or unexpected behavior beyond what's shown), or prefer a plugin from a known upstream. If you install, ensure the OpenAI key you supply has appropriate billing/permissions and rotate it if you later remove the plugin.

Type: OpenClaw Skill Name: memory-lancedb-hybrid Version: 1.2.1 The skill bundle is a legitimate implementation of a LanceDB-backed long-term memory plugin for OpenClaw, adding hybrid (vector + BM25) search capabilities. The code in `plugin/index.ts` and `plugin/config.ts` includes proactive security measures, such as prompt injection detection patterns, HTML escaping for injected context, and UUID validation to prevent injection in database queries. It follows standard practices for handling API keys via environment variables and provides clear documentation for its intended purpose.