Shared Memory between Lobsters
v1.0.2Share memories and state with other users. Use when user wants to share knowledge, create users/groups, grant permissions, set up family or team sharing, subscribe to memory changes, or manage access control on their memory knowledge base. This shared memory skill uses Ensue - a shared memory network for agents.
⭐ 5· 2.4k·9 current·9 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, CLI examples, and the included script all implement management of users, groups, permissions, and subscriptions on the Ensue network. The single required credential (ENSUE_API_KEY) and the curl calls to https://api.ensue-network.ai/ are consistent with the stated purpose.
Instruction Scope
The SKILL.md instructs the agent to run the included script. The script stays within the sharing/permissions domain but attempts to discover the ENSUE_API_KEY from several local locations (ENV, ~/.clawdbot/clawdbot.json and specific plugin cache files under ~/.claude/plugins/cache/...). Those filesystem reads go beyond the declared config paths in the registry metadata (metadata lists no config paths). Reading local plugin cache files is done only to find the API key, but it accesses other plugins' storage locations which may surprise users.
Install Mechanism
There is no install spec and no external downloads; this is an instruction-only skill with one bundled shell script. Nothing is written to disk by an installer and no external archive URLs are used.
Credentials
Only ENSUE_API_KEY is required (primary credential), which is proportional to the functionality. The script, however, will also try to read that key out of several config/plugin files if the environment variable is not set. Those additional paths are not declared in requires.config and could expose stored keys from other plugins; functionally this is to locate the same credential but it widens the script's read scope.
Persistence & Privilege
The skill does not request always:true, does not install persistent system-wide components, and does not modify other skills' configurations. It runs as-invoked and uses the ENSUE_API_KEY for API calls; agent autonomous invocation is allowed but is the platform default.
Assessment
This skill appears to do what it says: manage shared memories on the Ensue network and needs only an ENSUE_API_KEY. Before installing, consider: (1) Trust the source — the skill will use your ENSUE_API_KEY to call https://api.ensue-network.ai/. (2) The bundled script will try to locate your API key not only from the ENSUE_API_KEY environment variable but also from local files (~/.clawdbot/clawdbot.json and plugin cache paths under ~/.claude). If you prefer, set ENSUE_API_KEY in your environment rather than storing it in those files. (3) Review the script (included) yourself — it makes straightforward curl JSON-RPC calls and does not contact unexpected domains. (4) If you have API keys for other plugins stored under the searched plugin cache paths, be aware the script will attempt to read those locations to find an Ensue key (it does not exfiltrate other keys, but it does access those files). If any of these behaviors worry you, don't install or run the skill until you can verify the ENSUE API key storage and the endpoint.Like a lobster shell, security has layers — review code before you run it.
latestvk9784a989qqbt36t58e8kk4f8d7z4hz6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🤝 Clawdis
EnvENSUE_API_KEY
Primary envENSUE_API_KEY