ClawHub
Back to skill

Security audit

Legacy — Qoris Memory (use qoris-memory-mcp)

Security checks for vulnerabilities and agentic risk

Overview

This legacy Qoris Memory skill is a disclosed cloud MCP memory integration using user-provided Qoris credentials, with no local code execution or hidden behavior found.

Install the canonical qoris-memory-mcp listing instead of this legacy slug. Before using it, confirm that Qoris cloud storage is acceptable for your workspace, avoid saving secrets or regulated data unless approved, and rotate the QORIS_API_KEY if access should be revoked.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Credential Access

High
Category
Privilege Escalation
Confidence
60% confidence
Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · config.example.env (reported line 2)May include surrounding context.

text
# Qoris Memory Configuration
# Copy this file to .env and fill in your credentials
# Get your credentials at qoris.ai/dashboard

# Required: Your Qoris API key

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The README explicitly instructs users to export an API key and workspace ID for a third-party hosted service, but it does not warn that the skill depends on external network access or that agent data and memories may be transmitted off-platform. For a persistence/memory product, this creates real risk of sensitive prompts, documents, or organizational context being sent to an external service without informed consent or proper secret-handling expectations.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.