memory-lancedb-pro-openclaw

SUSPICIOUS: The skill’s capabilities fit a memory plugin, and provider/config requirements are proportionate. The main risk is install trust: it recommends executing a mutable same-org raw GitHub setup script and beta/unpinned installs, which can modify config and restart services; this is medium supply-chain risk but not clear malware or credential-harvesting behavior.