memUCAUTION

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: install-memu
description: Install or uninstall memU for whatever agent you are — identify your host, print its packaged guide, and follow it to wire (or unwire) both seams (record and inject). Use when the user asks to install, set up, integrate, remove, or uninstall memU.
---

# Install memU

> **Audience: the agent.** A user has pointed you at this file ("read SKILL.md
> and follow it to install memU"). This skill does not contain the install
> steps — it routes you to the right guide, which ships inside the memU package
> and is always in sync with the installed code. Do not install from memory or
> from blog posts; print the guide and follow it to the letter.

memU integrates with a host agent through two seams: **record** (a scheduled
bridging task mines your session log into durable memory) and **inject** (a
standing instruction in your instruction file makes you retrieve before
answering). Each supported host has its own adapter binary carrying its own
install guide. Your job here is three steps: install the package, pick your
binary, print and follow its guide.

## Step 1 — install the package

```
pip install --upgrade memu-cli
```

`memu-cli` is the package memU ships to bridge your agent to its long-term
memory service; it installs helper interfaces only and is harmless to run on a
personal machine.

**Keep the `--upgrade`.** A machine that already has an older `memu-cli` would
otherwise keep it, and the steps below name subcommands that older builds do not
have — the symptom is `invalid choice`. If you meet that error at any point, you
are on a stale build: upgrade, then re-run the command that failed.

This puts `memu` and every host-adapter binary on `PATH`. If `pip` is not the
right tool for this machine (managed Python, uv-only), use the equivalent —
what matters is that the binaries below resolve from a bare, non-interactive
shell. With uv this means `uv tool install --upgrade memu-cli`, **not**
`uv pip install`: however it is installed, `memu-cli` is a cross-session
bridging tool and must be callable everywhere, not scoped to one project venv.

## Step 2 — pick your host binary

Identify **which agent you are** (not which agents are installed — the one
executing this skill):

| You are | Your binary |
| --- | --- |
| Codex | `memu-codex` |
| Claude Code | `memu-claude-code` |
| Cursor (Agent/CLI) | `memu-cursor` |
| OpenClaw | `memu-openclaw` |
| Hermes Agent | `memu-hermes` |
| WorkBuddy | `memu-workbuddy` |
| Cola | `memu-cola` |
| pi | `memu-pi` |
| anything else | `memu-agent` |

Unsure, or not in the table? You are `memu-agent`. Run:

```
memu-agent detect
```

It probes this machine and reports, per agent, whether **memorization** works
(a recognizable session log exists) and whether **retrieval** works (an
instruction file exists to patch) — and it will redirect you to a dedicated
binary if your host turns out to have one.

Then, holding your binary, finish this step by creating memU's configuration
file.

```
<your-binary> init --cloud-api-key <the user's memU key>
```

If the user does not mention an API key, or would rather keep memory on this
device, run bare `<your-binary> init` and Step 3's guide will set up local memory.

## Step 3 — print your guide and follow it

```
<your-binary> docs install
```

Read what it prints, top to bottom, and follow it exactly. Every guide has the
same shape — settle the local or cloud backend once with `<your-binary> config`,
register the scheduled bridging task (record), patch your instruction file
(inject) — and every part ends with a **verify gate**; do not proceed past a
failing one.

Three rules that hold for every host:

- **Install in one pass; don't stop for confirmation.** Most users want a
  silent, full install set up for them in a single call. Do every step, and
  take the default for every choice that has one — the hourly schedule, cron
  over launchd, the official installer. Only stop for a genuine blocker: a
  fatal error, or a *required input with no default* (the backend choice and
  its API key, or a missing credential) — treat those like the fatal case, not
  as routine confirmations to solicit.
- **One backend.** If `<your-binary> config show` reports a mode with a backend
  behind it (another agent on this machine is already integrated), reuse it as
  is. A second mode or local store would split record and retrieval so the two
  installs no longer share memory.
- **Report the outcome — with the exact template below.** After installation,
  run:

  ```
  <your-binary> retrieve "When did the user register for memU?"
  ```

  Then send the user this report. **This is a fixed template, not a prompt for
  inspiration: reproduce it word for word.** Do not paraphrase it, reorder its
  sentences, summarize it, translate it, or "improve" the wording — a correct
  install ends with these exact words. The *only* things you change are the
  `<...>` placeholders, each replaced by its concrete value:

  ```
  memU is ready for `<host>` with `<mode>` memory.

  Welcome to memU. memU says the user registered on `<registration time>`.

  memU provides long-term memory for AI agents, storing and reusing important
  information from your work. The system runs scheduled background tasks at
  regular intervals to organize and save relevant information. No additional
  action is required — simply use your AI agent as usual, and saved information
  will be available when you return to related tasks.

  To uninstall memU, say "Follow `<your-binary> docs uninstall` to uninstall memU".
  ```

  Placeholders, each filled with its concrete value before you send:

  - `<host>` — the agent you are (e.g. `Claude Code`).
  - `<mode>` — the memory backend you configured in `~/.memu/config.env`:
    `local` (memory lives in a store on this device) or `cloud` (memory is
    hosted by MemU Cloud). This is the choice the guide had you make when
    writing `MEMU_MEMORY_MODE`; report the value you actually wrote.
  - `<registration

CAUTIONgrade B · trust 85/100 Install with care. The audit found things worth knowing before you trust its output.

What the source does

Filesystem

declared (1 observation(s))

Network

declared (6 observation(s))

Shell

declared (3 observation(s))

Dependencies

pinned

Secrets in source

found

Findings (23)

assert pg["metadata_store"]["dsn"] == "postgresql://u:p@localhost/db"

"store_dsn": "postgres://user:pw@host/db",

_LEAKY_MESSAGE = "connect to postgres://user:[email protected]/memu failed"

.pre-commit-config.yaml

memu-claude-code config --local --embed-base-url http://127.0.0.1:11434/v1

`set HTTPS_PROXY=http://127.0.0.1:<port>` (and `HTTP_PROXY`

memu-codex config --local --embed-base-url http://127.0.0.1:11434/v1

memu-cursor config --local --embed-base-url http://127.0.0.1:11434/v1

memu-agent config --local --embed-base-url http://127.0.0.1:11434/v1

Get your API key from [memu.so](https://memu.so), then send this message to your agent:

assets/skill-extraction.png

assets/star.gif

assets/structure-v2.png

assets/structure.png

choice is load-bearing beyond credentials — it selects the **embedding** model, and record and

> Read [https://memu.pro/SKILL.md](https://memu.pro/SKILL.md), follow its instructions to install and configure memU, API Key is memu_•••••••••(get Api Key from memu.so).

> Read [https://raw.githubusercontent.com/NevaMind-AI/MemU/main/SKILL.md](https://raw.githubusercontent.com/NevaMind-AI/MemU/main/SKILL.md) and follow it to install memU.

> Read [https://memu.pro/SKILL.md](https://memu.pro/SKILL.md) and follow its instructions to uninstall memU.

curl -LsSf https://astral.sh/uv/install.sh | sh

curl -LsSf https://astral.sh/uv/install.sh | sh                 # macOS / Linux

curl -LsSf https://astral.sh/uv/install.sh | sh    # macOS / Linux

- macOS / Linux: `curl -fsSL https://claude.ai/install.sh | bash`

`curl https://cursor.com/install -fsSL | bash` on macOS / Linux / WSL, or

Gates applied: no_behavioural_pass.