Back to skill
Skillv1.0.1
VirusTotal security
smart-memory-manager · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:43 AM
- Hash
- 7f8ee7bf84d9487e0e78497d3ddb3f0fac1d89938591cd3de0649ae4b47fe41a
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: smart-memory-manager Version: 1.0.1 The skill provides memory management with file persistence but contains a path traversal vulnerability. The `load` and `save` actions in `index.ts` allow reading and writing files using a user-provided `persistPath` without any sanitization or validation, potentially allowing access to sensitive files outside the intended directory. While this is a significant security flaw, it appears to be a vulnerability rather than intentional malice.
- External report
- View on VirusTotal
