Memos Search

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is advertised as search-only, but its instructions cover persistent memory writes, deletion, listing, and replacing the default memory service.

Install only if you intend to let the agent use MemOS as a full persistent memory manager, not just a search tool. Keep MEMOS_API_URL pointed at a trusted server, and require explicit confirmation before saving, deleting, or replacing memory behavior.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user expecting a search helper could unknowingly enable broader memory-management behavior.

Why it was flagged

This narrow search-only description conflicts with SKILL.md, which says the skill should be used to save/store memories, list/delete memory files, and replace OpenClaw's default memory. Users may not realize it enables mutation and persistence.

Skill content
Description: Search and retrieve memory content using MemOS API based on user queries, supporting up to top 3 relevant results.
Recommendation

Rename or describe the skill as a full MemOS memory manager, or remove add/delete/default-memory replacement instructions from a search-only skill.

What this means

The agent could add or delete persistent memories if it follows these instructions, affecting future retrieval and memory state.

Why it was flagged

The documented API surface includes adding, listing, and destructive deletion of memories, which is broader than the stated search purpose and lacks explicit confirmation or scoping guidance.

Skill content
POST /add ... GET /memories ... DELETE /delete/{agent}/{filename} ... Delete removes both file and vector index
Recommendation

Require explicit user confirmation before add/delete operations, limit endpoints to search/read if that is the intended purpose, and document the affected namespace and reversibility.

What this means

Sensitive or incorrect memory content could persist and affect later conversations or decisions.

Why it was flagged

Persistent memory can be reused across tasks and influence future agent behavior; replacing the default memory service increases that impact, but the artifacts do not define retention, validation, or poisoning safeguards.

Skill content
MemOS provides persistent memory storage via REST API ... replacing OpenClaw's default memory with MemOS
Recommendation

Only use this with a trusted MemOS server, define retention and deletion policies, review stored memories, and avoid replacing default memory unless the user explicitly wants that behavior.