Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Memory Graph
v1.0.0Agent-agnostic personal knowledge graph stored as markdown files with YAML frontmatter. Use when you need persistent context about the user's life, projects,...
⭐ 0· 209·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (local file-based memory graph) match the files and scripts provided. The skill reads/writes ~/memory/, builds a local SQLite index, runs local Node.js scripts, and optionally commits to a local git repo — all expected for the stated purpose.
Instruction Scope
Runtime instructions and scripts operate on ~/memory/ (graph/, log/, indexes/, backfill/) and the local SQLite index. They do not reference external credentials or remote endpoints in the runtime scripts. Notable behaviors: scripts read and write local markdown files, rebuild indexes, and search logs; commit.js runs git commands (adds/stages/commits). This is within scope but means the skill will modify files and commit changes to the user's ~/memory repository when invoked.
Install Mechanism
There is no install spec; this is instruction + bundled scripts. The setup process uses symlinks to expose scripts under ~/memory/scripts and requires Node.js 22+. No downloads from untrusted URLs or archive extraction are used.
Credentials
The skill declares no required environment variables or credentials (scripts accept an optional MEMORY_ROOT). The scope of env access (home directory memory path) is appropriate for a local file-based memory graph.
Persistence & Privilege
always:false (normal). The skill's scripts write to and modify files under ~/memory/, and commit.js executes git commands in that directory. Allowing autonomous agent invocation (platform default) means an agent could autonomously run these scripts and modify your files; that increases blast radius but is coherent with the skill's purpose.
Assessment
This skill appears coherent and implements a local, file-based memory graph as described, but review the following before installing:
- Inspect the scripts yourself (they are bundled). They will read/write ~/memory/ and can create symlinks from the skill folder into ~/memory/scripts/. Ensure you trust the skill source before creating those symlinks.
- Node.js 22+ is required. Run scripts manually first (e.g., run rebuild-indexes.js, query.js) to confirm behavior before allowing any agent to invoke them automatically.
- commit.js runs git commands (git add / git commit) in MEMORY_ROOT. If you enable git in ~/memory, understand commits will be made automatically when the script runs; the script does not auto-push but will stage/commit changes. Consider initializing the git repo yourself so you control commit history.
- Because the skill writes files and can be invoked by the agent, consider setting MEMORY_ROOT to a non-default path for testing, backing up any existing ~/memory, and limiting autonomous invocation or restricting which agents may call this skill until you’re comfortable.
- There are no network/exfiltration calls in the runtime scripts, but the HTML visualization references a public D3 CDN (for browser display only). If you need an air-gapped setup, host or inline dependencies locally.
If you’re unsure about the source, treat the skill as untrusted code: review all files, run in a sandboxed account or VM first, and don't grant it access to sensitive directories outside the intended ~/memory path.scripts/commit.js:28
Shell command execution detected (child_process).
scripts/rebuild-indexes.js:70
Shell command execution detected (child_process).
scripts/suggest-backfill.js:49
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk97bb5kgem2af2pe7mypn9c6z18399j8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
