Nm Memory Palace Memory Palace Architect

PassAudited by VirusTotal on May 9, 2026.

Overview

Type: OpenClaw Skill Name: nm-memory-palace-memory-palace-architect Version: 1.0.2 The skill bundle provides documentation and instructions for a 'Memory Palace Architect' tool designed for spatial knowledge organization. While the SKILL.md file references a Python script (scripts/palace_manager.py) and a configuration file (pyproject.toml) that are not included in the provided files, the instructions themselves are consistent with the stated purpose and do not contain any malicious commands, data exfiltration attempts, or harmful prompt injections. The content in the modules directory (e.g., franklin-protocol.md, sensory-encoding.md) is purely educational and focused on mnemonic techniques.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If you install the external plugin, you may be granting behavior that was not reviewed in this package.

Why it was flagged

The reviewed package is instruction-only, but it points users to an external plugin that may contain agents, hooks, commands, or code not present in the supplied artifacts.

Skill content
For the full experience with agents, hooks, and commands, install the Claude Code plugin.
Recommendation

Review the external plugin source and install it only from the trusted repository if you need the full command/hook functionality.

What this means

Running a local script that is not included in this reviewed package could execute code from your environment or from an external plugin.

Why it was flagged

The skill documents local Python script execution, but the referenced scripts are not included in the reviewed file manifest. The commands appear user-directed and purpose-aligned, not automatic.

Skill content
python scripts/palace_manager.py create "My Palace" "programming" --metaphor workshop
Recommendation

Before running the documented Python commands, confirm the script path, source, and contents.

What this means

A credential or wallet prompt would be unexpected for the documented memory-palace design workflow.

Why it was flagged

The supplied capability signals imply sensitive credential or wallet access, but the registry metadata declares no primary credential or environment variables, and the reviewed skill content does not describe credential or wallet use.

Skill content
requires-wallet; requires-sensitive-credentials
Recommendation

Do not provide wallet access or sensitive credentials for this skill unless a separately reviewed component clearly explains why they are needed.