@kalera/munin-openclaw

Munin - The Free (or $1.6/mo) Persistent Memory for OpenClaw. Stop your agent from having Alzheimer's.

This package appears to be a legitimate Munin adapter: it needs MUNIN_BASE_URL and MUNIN_API_KEY and will contact that endpoint to store/retrieve memories. Before installing: (1) Confirm the registry metadata discrepancy — the published metadata should list the required env vars; ask the publisher to correct/confirm. (2) Verify the provenance of @kalera/munin-sdk and @kalera/munin-runtime (review those packages or their source) because the adapter delegates network calls to them. (3) The package.json uses 'workspace:*' for dependencies — ensure your environment supplies those packages and that they are the official releases. (4) Only provide an API key to Munin endpoints you trust; if you need stronger guarantees, validate the client-side E2EE implementation and the embedding/encryption flow locally so plaintext never leaves your environment. If you are not comfortable verifying the dependent SDKs, treat this as untrusted and avoid granting the skill autonomous invocation with sensitive data.

Type: OpenClaw Skill Name: munin-openclaw Version: 1.0.1 The skill is a legitimate adapter for 'Munin,' a persistent memory service for AI agents. It facilitates storing and retrieving agent context via an external API (MUNIN_BASE_URL). The code in src/cli.ts and src/index.ts is a standard wrapper around the @kalera/munin-sdk, and the SKILL.md provides functional instructions for setup and E2EE usage without any signs of prompt injection or malicious intent.