Memory Complete

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a local memory database skill; no exfiltration or destructive behavior is shown, but it does persist user/agent context and uses local setup scripts.

Before installing, understand that this skill is designed to remember information in a local SQLite database. It looks purpose-aligned and no malicious behavior is shown in the provided artifacts, but you should avoid storing passwords, private secrets, or sensitive personal data unless you have a clear way to review and delete the stored memories.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Information the agent stores could be reused in later tasks and may affect future responses if inaccurate or overly sensitive data is saved.

Why it was flagged

The skill explicitly creates memory tables that can retain session context, diary entries, and summaries for later retrieval.

Skill content
5. `working_memory` - 工作记忆(会话临时) ... 6. `agent_diary` - Agent日记 ... 15. `session_summaries` - 会话摘要
Recommendation

Use it only for information you are comfortable retaining locally, avoid storing secrets, and look for or add deletion/retention controls.

What this means

Installing or setting up the skill may create local files and initialize a persistent database.

Why it was flagged

The skill documents local setup commands that create a directory and run included Python scripts. This is expected for initializing a memory database, but it is code execution during setup.

Skill content
install:\n  post_install: |\n    mkdir -p memory/database\n    python scripts/init_complete_database.py\n    python scripts/verify_complete_install.py
Recommendation

Run setup intentionally, review the included initialization scripts if possible, and confirm the database path is acceptable.