Simplemem
v1.0.1Efficient Lifelong Memory for LLM Agents - semantic compression, cross-session memory, and intent-aware retrieval
⭐ 2· 586·1 current·1 all-time
byIvan Cetta@nantes
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, required binary (python), and the single required env var (OPENAI_API_KEY) align with a semantic-memory skill that optionally calls OpenAI for embeddings. The included Python wrapper imports a 'simplemem' package if present, otherwise falls back to local JSON — this is coherent with the stated purpose.
Instruction Scope
SKILL.md stays on-topic (install simplemem, set OPENAI_API_KEY, add/retrieve memories). Minor inconsistency: SKILL.md and README mention a PowerShell CLI (simplemem.ps1) and a PS usage example, but the manifest does not include simplemem.ps1. Also, the instructions recommend pip installing 'simplemem' or cloning the GitHub repo — installing that package will run third-party code (expected for this skill) so review the upstream package before installing.
Install Mechanism
There is no automatic install spec in the registry (instruction-only), so nothing will be written automatically. The README suggests 'pip install simplemem' or cloning a GitHub repo (both common). That means the real runtime behavior depends on the external PyPI/GitHub package you choose to install; installing arbitrary pip packages has standard moderate risk and should be reviewed prior to use.
Credentials
Only OPENAI_API_KEY is required and used by the wrapper for the full feature set. That is proportionate for a memory system that uses OpenAI embeddings. No other secrets or unrelated env vars are requested.
Persistence & Privilege
The wrapper creates and writes to a local data directory (data/memories.json and a lancedb path if the upstream library is used). always:false and no system-wide config changes are requested. Persistent local storage of memories is expected for this skill; ensure you are comfortable with local retention of user data.
Assessment
This skill appears to do what it claims, but consider the following before installing: 1) The wrapper will use your OPENAI_API_KEY to call external APIs (billing and data-sharing implications) — consider using a dedicated key or billing alerts. 2) SKILL.md recommends 'pip install simplemem' or cloning GitHub; review the upstream PyPI package and/or repository code before installing, because installing a pip package runs code from that package. 3) The manifest mentions a PowerShell CLI (simplemem.ps1) in docs but that file is not included — expect the included Python wrapper to be the provided functionality. 4) Memories are persisted locally under the skill's data directory (data/memories.json and possibly a lancedb); if this contains sensitive data, store it securely or clear it as needed. 5) If you need higher assurance, audit the upstream project (https://github.com/aiming-lab/SimpleMem) or run installations in an isolated environment (container/VM) first.Like a lobster shell, security has layers — review code before you run it.
latestvk9767ftnfr7wpkk0z5rra62nph81kqq6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis
Binspython
EnvOPENAI_API_KEY
Primary envOPENAI_API_KEY