install-memory-powermem
Fail
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the user to execute a remote script using 'curl -fsSL https://raw.githubusercontent.com/ob-labs/memory-powermem/main/install.sh | bash', which runs code directly from a remote source without prior manual inspection.
- [COMMAND_EXECUTION]: The skill provides several shell commands for system environment setup, including Python version validation, virtual environment management, and OpenClaw plugin commands.
- [EXTERNAL_DOWNLOADS]: The skill fetches an installation script from a GitHub repository and downloads the 'powermem' package from a Python package registry during the setup process.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/ob-labs/memory-powermem/main/install.sh - DO NOT USE without thorough review
Audit Metadata