Install Powermem Memory
v0.3.0Step-by-step guide to install and configure the PowerMem long-term memory plugin (full path, options, troubleshooting). After setup, the plugin auto-captures...
⭐ 0· 98·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The SKILL.md describes installing and configuring the memory-powermem plugin and PowerMem (pip package or server). The actions described (checking python/openclaw, pip installing powermem, configuring OpenClaw plugin entries) match the stated purpose. Minor inconsistency: the registry metadata declares no required env vars/credentials, but the instructions explicitly rely on OpenClaw 'agents.defaults.model' and provider API keys being configured (these are necessary for the default 'useOpenClawModel' flow).
Instruction Scope
The runtime instructions tell the agent/user to run local commands (python3 checks, venv creation, pip install, openclaw CLI config, optional powermem-server and curl health checks). They also document auto-capture/auto-recall behavior (the plugin will send conversation content to PowerMem). This scope is appropriate for an installer, but it explicitly instructs the agent to modify OpenClaw config and to possibly capture conversation text—this has privacy implications and should be reviewed by the user. The SKILL.md also references an install.sh (GitHub) which, if executed blindly, could run arbitrary commands.
Install Mechanism
There is no baked install spec in the skill bundle — installation is manual via standard tools: 'pip install powermem', optional 'powermem-server', and installing the OpenClaw plugin or a referenced install.sh on GitHub. These are standard package sources (PyPI, GitHub). No obscure download URLs or embedded archives are present in the skill bundle, but users should still inspect any remote install.sh before running it.
Credentials
The metadata declares no required environment variables, but the instructions rely on OpenClaw-provided model and provider credentials (LLM + embedding keys) when 'useOpenClawModel: true' (the default). That is proportionate to the plugin's function (it needs embeddings/LLM to run intelligent extraction), but the skill does not explicitly declare those credentials in the registry metadata—users should be aware that provider keys stored in OpenClaw will be used and that PowerMem may see injected LLM/embedding environment values when invoked.
Persistence & Privilege
The skill does not request 'always: true' and is user-invocable. Installing the plugin modifies OpenClaw's configuration (enabling a plugin slot) and results in persistent behavior (autoCapture/autoRecall enabled by default). That persistence is consistent with the plugin's purpose but increases the impact of stored memories; consider disabling autoCapture/autoRecall or reviewing retention settings if you don't want automatic long-term storage.
Assessment
This guide appears to do what it claims (install and configure PowerMem for OpenClaw), but take these precautions before proceeding:
- Verify sources: confirm the powermem package on PyPI and inspect the upstream repositories referenced in the docs (oceanbase/powermem and ob-labs/memory-powermem). Don't install packages or run scripts from unknown sources without review.
- Never run curl | sh blindly: if you use the referenced install.sh, open it in a text editor and review what it will do (file writes, downloads, system changes). Prefer manual steps you understand.
- Use a virtualenv: install powermem inside an isolated venv to limit scope and avoid polluting system Python.
- Prefer local SQLite for personal use: the default CLI mode stores data locally under the OpenClaw stateDir; avoid HTTP/server mode unless you control the server and trust its network exposure.
- Inspect any created powermem.env: if the installer writes ~/.openclaw/powermem/powermem.env, review its contents and credentials before leaving it on disk.
- Understand auto-capture: the plugin can automatically store conversation highlights. If you have privacy concerns, set autoCapture/autoRecall to false or tighten recall/retention settings.
- Protect provider keys: the plugin may use OpenClaw-injected LLM/embedding credentials; ensure those credentials are stored securely in OpenClaw and audit which services the plugin will call.
If you want a higher-assurance review, provide the exact install.sh referenced or the memory-powermem plugin source so those artifacts can be inspected for unexpected behaviors.Like a lobster shell, security has layers — review code before you run it.
latestvk976ma5q9fgxta07g10gtrrfzn83gbnm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
