OpenClaw Memory Kit

Scaffold, sanitize, or share an OpenClaw multi-agent memory system with a reusable workspace, memory-lancedb-pro configuration, role prompts, task-board conv...

This package is documentation-heavy and claims to scaffold a sanitized OpenClaw memory workspace, but it does not include the referenced bootstrap PowerShell script or any installer. Before running anything that writes files or installs npm packages: 1) ask the publisher for the bootstrap script source or view its full contents so you can inspect it; 2) do not paste or copy your live .env or secrets — follow the sanitization checklist; 3) run any generator or npm installs in an isolated directory or container and back up your existing OpenClaw state; 4) verify npm package names and versions against the official registry (and prefer pinned versions you trust); and 5) if you want to let the agent run commands, require explicit confirmation for each filesystem or network action. If the maintainer cannot provide the actual bootstrap script or an explicit install manifest, treat this skill as incomplete and avoid running ad-hoc scripts fetched from unverified sources.

Type: OpenClaw Skill Name: openclaw-memory-kit Version: 0.2.1 The skill bundle provides a framework for scaffolding and sanitizing OpenClaw memory workspaces, which involves high-risk operations such as executing a PowerShell script (bootstrap-openclaw-memory.ps1), installing npm packages (memory-lancedb-pro), and modifying the filesystem (SKILL.md, references/generated-files.md). While the documentation (references/sanitization.md) demonstrates a strong focus on security by explicitly forbidding the copying of secrets, API keys, or personal data, the reliance on shell execution and package management constitutes a significant attack surface. No clear evidence of malicious intent or data exfiltration was found, but the capabilities are inherently risky.