Memory Pro System

Enhanced AI memory system — vector store, document-level MSA, knowledge graph, collision engine, executable skills, and closed-loop skill evolution.

This skill is not outright malicious, but several red flags mean you should proceed cautiously. Before installing or running it: 1) Review the remote GitHub repository (FluffyAIcode/openclaw-memory-pro-system) — inspect setup.py/pyproject.toml and all source files for unexpected network calls, credential harvesting, or shell execs. 2) Avoid installing directly into your primary environment — run the install in an isolated VM or container. 3) Do NOT point it at your production OpenClaw auth-profiles.json or reuse sensitive API keys; create limited-scope/test LLM keys and separate Telegram/test channels. 4) Prefer a pinned commit or official release with checksums rather than cloning an unpinned repo. 5) Audit and control scheduled tasks and any auto-generated skills/webhooks; disable automatic skill activation until you’ve reviewed what it proposes. 6) If you lack capacity to audit the repo, treat this as untrusted code and avoid installing it.

Type: OpenClaw Skill Name: openclaw-memory-pro Version: 0.0.7 The bundle describes an advanced memory system with high-risk features including a background server, automated task scheduling, and a 'Skill Registry' that supports executable action bindings such as webhooks and tool calls (`SKILL.md`). These capabilities, while aligned with the stated purpose, create a significant attack surface for indirect prompt injection and persistent background execution. Additionally, `_meta.json` contains a future-dated publication timestamp (May 2026), and the 'Skill Proposer' subsystem suggests automated generation of executable logic, which could be exploited to run unauthorized commands if the memory corpus is poisoned.