Memora - Personal Knowledge Base (RAG)

Memora — A self-hosted RAG (Retrieval-Augmented Generation) personal knowledge base. Built with FastAPI + Qdrant + DashScope/OpenAI Embedding + DeepSeek/Open...

This skill appears coherent and matches its description, but be mindful of two practical risks: (1) Uploads will read the local file path you provide and POST its contents to the server at KB_API_BASE — do not upload sensitive files unless you absolutely trust that backend. (2) KB_API_BASE can be any URL; if you set it to a remote/untrusted endpoint, the service will receive your queries, documents, and returned context. Prefer running the Memora backend locally (KB_API_BASE=http://127.0.0.1:8080) or on a trusted host, review the backend's source (SKILL.md links a GitHub repo) before connecting to unknown endpoints, and avoid giving the skill any credentials or backend URL that you wouldn't trust with your documents.

Type: OpenClaw Skill Name: memora-knowledge-base Version: 1.1.0 The skill provides functionality to read local files and upload them to a network endpoint, which are high-risk capabilities. While these actions are aligned with the stated purpose of a personal knowledge base (RAG), the script `scripts/kb_api.py` allows for arbitrary file access and data transmission to a configurable backend (`KB_API_BASE`). No evidence of intentional malice, obfuscation, or prompt injection was found, but the broad file and network access permissions warrant a suspicious classification per the provided analysis criteria for risky capabilities.