Mema Brain

Mema's personal brain - SQLite metadata index for documents and Redis short-term context buffer. Use for organizing workspace knowledge paths and managing ep...

This skill appears to do what it says: maintain a local SQLite metadata index and use a Redis namespace for ephemeral state. Before installing, confirm you trust the Redis endpoint you will configure—pointing REDIS_HOST to a remote or untrusted server will expose your short-term context to whoever controls that Redis instance (SKILL.md warns this). Note: the DB path is hard-coded to ~/.openclaw/memory/main.sqlite (env.example suggests DB_PATH but the script does not use it). The package only requires the redis Python library; review the small scripts/mema.py file yourself if you want full assurance. If you need encrypted/authenticated Redis, modify the script to support REDIS_PASSWORD or run a local, secured Redis instance.

Type: OpenClaw Skill Name: mema Version: 1.1.1 The skill is classified as suspicious due to its network connectivity to a Redis instance configured via environment variables and its ability to store arbitrary file paths in a local SQLite database. While these capabilities are aligned with the stated purpose of a 'memory system,' they present a risk if the Redis instance is misconfigured or insecure, or if an agent is instructed to index sensitive paths. The `SKILL.md` provides a warning about Redis host trustworthiness, but the underlying capability for potential misuse by a compromised agent remains.