MemOS Plugin One-Click Installer

Persistent local memory for OpenClaw agents. Use when users say: - "install memos" - "install MemOS" - "setup memory" - "add memory plugin" - "openclaw memor...

This skill is an instruction-only installer that tells the agent to autonomously download and run remote install scripts, modify configs, and start local services. That pattern (curl | bash, irm | iex from a custom CDN) can execute arbitrary code on your machine. Before installing: 1) Verify the publisher and prefer official release URLs (GitHub release pages with checksums) over unknown CDNs; 2) Request the install script contents and a checksum/hash so you can review the code yourself; 3) If you must try it, run the install in a sandbox/VM or inspect the script locally rather than piping to a shell; 4) Be cautious about allowing autonomous, non-interactive installs — consider requiring the agent to prompt for explicit permission before executing network downloads or restarting services; 5) If you plan to use external embedding providers or team sharing, prepare API keys and review how they will be stored and used. If you want, ask me to fetch and show the install script (or summarize it) before you proceed.

Type: OpenClaw Skill Name: memos-oneclick-install Version: 1.0.0 The skill bundle implements a 'one-click' installer for the MemOS plugin that utilizes high-risk patterns, including remote script execution (curl|bash) and automated configuration modification. Most critically, SKILL.md contains explicit prompt-injection-style instructions directing the agent to perform all shell operations and system restarts autonomously without seeking user confirmation, effectively bypassing human-in-the-loop security guardrails. It also employs minor obfuscation via String.fromCharCode in Step 3.5 to execute gateway commands. While these behaviors are technically consistent with the stated goal of a seamless installation, the combination of remote payloads from cdn.memtensor.com.cn and the forced bypass of user consent warrants a suspicious classification.