← Back to Skills Marketplace
450
Downloads
0
Stars
3
Active Installs
1
Versions
Install in OpenClaw
/install mem0-1-0-0
Description
Intelligent memory layer for Clawdbot using Mem0. Provides semantic search and automatic storage of user preferences, patterns, and context across conversati...
Usage Guidance
This skill appears to implement the memory functionality it claims, but there are important inconsistencies to resolve before installing: (1) It requires an OpenAI API key (OPENAI_API_KEY) even though the registry metadata declares no required env vars — supply and protect that key if you proceed. (2) The package includes Node scripts and package.json but provides no install instructions; you should run npm install (or otherwise ensure mem0ai and transitive deps are available) in a controlled environment or container. (3) The default USER_ID is hardcoded to 'abhay' and the skill writes data to ~/.mem0 — confirm you are comfortable with local persistent storage and change the default userId before use to avoid cross-user mixing. If you need higher assurance, ask the publisher for an explicit install spec and a corrected requirements list, review mem0ai's privacy/telemetry docs, and test the scripts in an isolated environment first.
Capability Analysis
Type: OpenClaw Skill
Name: mem0-1-0-0
Version: 1.0.0
The skill is designed for a legitimate purpose (intelligent memory for a chatbot) and includes good security practices in its documentation (e.g., explicitly warning against storing secrets). However, it is classified as 'suspicious' due to potential vulnerabilities. Specifically, the `scripts/mem0-add.js` file directly uses `JSON.parse` on user-controlled input (`--messages` argument) without explicit sanitization, which could lead to unexpected behavior or denial of service if crafted maliciously. More critically, all memory operations (`mem0-add.js`, `mem0-search.js`, `mem0-list.js`, `mem0-delete.js`) accept a `--user` argument to specify the `userId`. If the OpenClaw agent environment does not strictly enforce the `userId` based on the current user's context, a malicious actor could potentially exploit this to access, modify, or delete memories belonging to other users, representing a logical access control vulnerability.
Capability Assessment
Purpose & Capability
The skill's name, description, and code consistently implement a local memory layer (uses mem0ai, local vector store, OpenAI embedder/LLM). However registry metadata claims no required environment variables while SKILL.md and scripts expect OPENAI_API_KEY. That metadata omission is an incoherence that affects whether the skill can run and what secrets it needs.
Instruction Scope
SKILL.md and the scripts limit activity to semantic search, add/list/delete operations, and local storage under ~/.mem0. The code does not attempt to read arbitrary system files or contact unexpected endpoints (it uses the mem0ai client which, per config, will call OpenAI). It documents what to store and not store. This is within the stated memory-purpose scope.
Install Mechanism
There is no install spec even though package.json, package-lock.json, and Node scripts are included. That means the skill either expects the environment to already have Node deps (mem0ai) installed or will fail. The package-lock references many transitive packages (normal for npm), but absence of an install instruction is a usability/security gap that could cause unexpected behavior.
Credentials
The skill actually reads process.env.OPENAI_API_KEY (and optionally JSON_OUTPUT) but the registry lists no required env vars. Requesting an OpenAI API key is proportionate to the stated purpose, but the omission from declared requirements is misleading. Also USER_ID is hardcoded to 'abhay' in config, which could cause cross-user data mixing unless overridden.
Persistence & Privilege
The skill persists data locally under ~/.mem0 and creates an SQLite history.db — that's expected for a memory store and does not modify other skills or system-wide settings. always is false. Note the fixed history path and default USER_ID which may lead to persistent data on disk and potential accidental sharing between contexts.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mem0-1-0-0 - After installation, invoke the skill by name or use
/mem0-1-0-0 - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of mem0: adaptive memory for Clawdbot
- Adds Mem0, an intelligent memory layer that learns and recalls user preferences, patterns, and conversational context.
- Supports semantic search and automatic memory extraction for dynamic, adaptive responses.
- Provides commands for searching, adding, listing, and deleting memories via scripts.
- Complements structured MEMORY.md with learned, behavioral context.
- Delivers improved performance: higher accuracy, faster retrieval, and reduced token usage.
- Includes detailed storage guidelines and programmatic access options.
Metadata
Frequently Asked Questions
What is Mem0 1.0.0?
Intelligent memory layer for Clawdbot using Mem0. Provides semantic search and automatic storage of user preferences, patterns, and context across conversati... It is an AI Agent Skill for Claude Code / OpenClaw, with 450 downloads so far.
How do I install Mem0 1.0.0?
Run "/install mem0-1-0-0" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Mem0 1.0.0 free?
Yes, Mem0 1.0.0 is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Mem0 1.0.0 support?
Mem0 1.0.0 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Mem0 1.0.0?
It is built and maintained by Sieyer (@sieyer); the current version is v1.0.0.
More Skills