Supermemory Free

Cloud knowledge backup and retrieval using Supermemory.ai free tier. Store high-value insights to the cloud and search them back when local memory is insuffi...

This skill implements the advertised cloud backup/search behavior, but take care before installing or enabling auto-capture: 1) Confirm and set SUPERMEMORY_OPENCLAW_API_KEY in the intended .env (the registry view you saw omitted it — that’s an inconsistency). 2) Review your memory/ logs (memory/YYYY-MM-DD.md) for any sensitive secrets, credentials, full tokens, or paths you do not want uploaded; the script's heuristics may miss them. 3) Use the auto-capture dry-run (--dry-run) first to see what would be uploaded. 4) If you don't want persistent uploads, do not run install_cron.sh (or inspect/modify the cron command to remove 'source .env' or restrict scope). 5) If you install the cron, monitor the created log file and the .capture_state.json dedup file; consider limiting file permissions. 6) Prefer manual store/search usage if you cannot guarantee that session memory is free of sensitive data. If you want a cleaner metadata view, ask the publisher to correct the registry metadata to list the required env var(s).

Type: OpenClaw Skill Name: supermemory-free Version: 1.0.0 The skill is designed to store and retrieve knowledge from Supermemory.ai, which involves sending data to an external service (api.supermemory.ai). While this is the stated purpose, the `auto_capture.py` script attempts to filter sensitive information (passwords, secrets, tokens) using regex-based `SKIP_PATTERNS`. This filtering, though well-intentioned, is inherently imperfect and could lead to unintentional leakage of sensitive data, classifying it as a vulnerability. Additionally, the `install_cron.sh` script uses `source .env` which, if the `.env` file were compromised, could introduce further risks. There is no evidence of intentional malicious behavior like exfiltration to unauthorized endpoints or covert backdoors.