Semantic Memory Search
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill appears to implement local semantic search as described, but there are a few incoherences (Cron/Discord push claim without implementation, hardcoded binary path and unnecessary Node requirement) that warrant caution before installing.
This skill is mostly coherent and implements local search by invoking a memsearch binary, but before installing you should: 1) Confirm where memsearch is installed and update scripts (they hardcode ~/Library/Python/3.14/bin/memsearch) or add it to PATH; 2) Manually pip install memsearch[local] and any dependencies and verify local-only operation if you need offline privacy; 3) If you expect automatic daily indexing and Discord notifications, note that no cron-job setup or Discord webhook/token handling is provided — you will need to implement those yourself (store any webhook token securely, not in the repo); 4) Be aware the scripts read your OpenClaw memory files (~/.openclaw/workspace/memory and MEMORY.md) — review contents for sensitive data before indexing; 5) The package.json Node engine declaration is unnecessary for the shipped shell scripts and may be ignored, but review the repo if you rely on package metadata. These inconsistencies look like sloppy packaging rather than malicious intent, but fix the missing pieces before relying on automation or remote notifications.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
No VirusTotal findings
Risk analysis
No visible risk-analysis findings were reported for this release.