Owletto OpenClaw Setup

Install and configure the Owletto memory plugin for OpenClaw, including OAuth login and MCP health verification.

Security Scan

The instructions and commands match the skill's stated purpose (install/configure Owletto for OpenClaw), but the skill metadata omits the runtime prerequisites the instructions actually require.

Purpose & Capability

SKILL.md only runs owletto and openclaw CLI commands (and falls back to a repo-local pnpm/tsx invocation). That matches the described goal of installing/configuring an Owletto OpenClaw plugin. However the skill metadata declares no required binaries or env vars even though the instructions explicitly check for node, pnpm, owletto, and openclaw on PATH — a mismatch that should have been declared.

Instruction Scope

The instructions stay on-topic: installing the OpenClaw plugin, performing owletto OAuth login (including device flow for headless), configuring, and running health checks. They do not instruct reading unrelated system files or exfiltrating data to third-party endpoints. The OAuth flow will create local credentials/tokens as part of normal operation, which is expected for this task.

Install Mechanism

This is an instruction-only skill with no install spec or code to write to disk. That is the lowest-risk install model. The fallback to pnpm exec tsx assumes a local repo layout (packages/cli), which is fine technically but only works if the agent is run from the project repo.

Credentials

The skill does not request environment variables or credentials in metadata. The runtime actions will trigger normal OAuth authentication with Owletto (storing tokens locally) which is proportionate to the stated purpose. No unrelated service credentials or config paths are requested.

Persistence & Privilege

always is false and the skill does not request system-wide changes or modifications to other skills. The expected result of login/configure/health is creating or updating plugin configuration and local tokens for Owletto, which aligns with the skill's goal.

Assessment

This skill appears to do what it says: it runs the Owletto and OpenClaw CLIs to install and configure the memory plugin and perform an OAuth login/health check. Before installing or running it: (1) verify you trust the Owletto/OpenClaw CLIs and their sources (npm/pnpm or a vendor site) because OAuth tokens will be created/stored locally; (2) ensure you have node and pnpm installed and that 'owletto' and 'openclaw' are present on PATH — the skill metadata forgot to list those prerequisites; (3) if using the pnpm/tsx fallback, only run it inside the expected repository (packages/cli path) or install the official owletto CLI instead; (4) double-check the <mcp-url> you provide so you don't point credentials at the wrong endpoint. The omission of declared prerequisites looks like an authoring oversight rather than malicious intent, but confirm the provenance of the owletto/openclaw binaries before proceeding.

Use this skill when a user wants Owletto long-term memory working in OpenClaw.

For general Owletto usage with Codex, ChatGPT, Claude, Cursor, Gemini, or generic MCP workflows, use owletto.

Setup Flow

1. Ensure CLI prerequisites are available.

node --version
pnpm --version
owletto --help

2. Install the OpenClaw plugin package.

openclaw plugins install owletto-openclaw-plugin

3. Log in to Owletto for MCP access.

owletto login --mcpUrl <mcp-url>

4. Configure OpenClaw plugin settings.

owletto configure --mcpUrl <mcp-url>

5. Verify auth + MCP connectivity.

owletto health

CLI Fallback

If owletto is not on PATH, use the repo-local CLI entrypoint:

pnpm -C packages/cli exec tsx src/bin.ts login --mcpUrl <mcp-url>
pnpm -C packages/cli exec tsx src/bin.ts configure --mcpUrl <mcp-url>
pnpm -C packages/cli exec tsx src/bin.ts health

Notes

• Replace <mcp-url> with the target MCP URL (e.g. the URL shown on the workspace data sources page).
• If openclaw is not on PATH, install OpenClaw CLI first, then rerun setup.
• For headless environments without browser access, use owletto login --device --mcpUrl <mcp-url>.