openclaw-memx-memory-plugin

SUSPICIOUS: the skill’s purpose and capabilities mostly align for a memory plugin, and there is no clear credential theft or hidden exfiltration. However, the install trust chain is weak and publisher identity is inconsistent, with a personal GitHub repo used as the core plugin source plus unpinned pip dependencies; that makes the skill medium-high risk despite otherwise coherent functionality.