Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Fast Unified Memory

v1.0.1

Provides a high-performance unified memory combining file-based OpenClaw storage with semantic vector search using local Ollama embeddings for fast, private...

0· 344·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The code matches the stated purpose (combines file-based OpenClaw memory with local Ollama embeddings). However, some required accesses are oddly specific: MEMORY_DIR is hardcoded to '/home/broedkrummen/.openclaw/workspace/memory' while SKILL.md refers to '~/.openclaw/...'. That hardcoded absolute path and a default user_id of 'broedkrummen' are inconsistent with a generic skill and could cause it to access another user's files or simply fail.
Instruction Scope
SKILL.md instructs installing Ollama and pulling a model and shows CLI usage that is consistent with the code. The code only contacts a local Ollama endpoint (http://localhost:11434) and reads/writes local files (~/.mem0/fast-store.json and the OpenClaw directory). It does not transmit data to external endpoints beyond the local Ollama service. The instruction to run curl | sh to install Ollama is higher-risk user action but it's part of the documented install steps, not performed by the skill itself.
Install Mechanism
There is no automated install spec in the skill (lowest risk). SKILL.md tells users to run an online installer (curl https://ollama.ai/install.sh | sh) — that is a remote install script from the vendor site; it's common but inherently riskier than installation from a reviewed package/manager. The skill itself does not download or execute remote code.
!
Credentials
The skill declares no required environment variables, but the code uses process.env.HOME for the mem0 store and a hardcoded MEMORY_DIR pointing to a specific user's home. It also hardcodes OLLAMA_URL in code instead of allowing configuration via env var. The default user_id in add/list functions is hardcoded to 'broedkrummen'. These choices are disproportionate/unexpected for a reusable skill and may cause unintended file access or confusion.
Persistence & Privilege
The skill does not request persistent or cross-skill privileges. always is false, it does not modify other skills, and it only writes its own store (~/.mem0/fast-store.json).
What to consider before installing
This skill appears to implement a local unified memory using Ollama and file-based storage, but there are some red flags you should address before installing or running it on your primary machine: - Hardcoded paths and username: The code uses '/home/broedkrummen/.openclaw/workspace/memory' and default user_id 'broedkrummen'. That is likely a leftover from the developer's environment. Inspect and change these to use process.env.HOME or a configurable path before running it. Running it as-is could attempt to read or write the wrong user's files or simply fail. - Configuration via env: The code hardcodes OLLAMA_URL and the embedding model; consider editing the script to accept OLLAMA_URL, MODEL, and memory paths via environment variables or CLI flags. - Installer instruction: SKILL.md suggests running curl | sh to install Ollama from the vendor site. Only run that if you trust the source and understand the installer. Prefer installing via your system package manager or reviewing the install script contents first. - Sandbox/testing: Run the script in a disposable/sandbox environment (or a container) first to confirm which files are read/written and to verify it only contacts your local Ollama instance. - Audit storage: Check ~/.mem0/fast-store.json and your OpenClaw memory folder after use. If you need multi-user behavior, modify code to avoid a hardcoded user_id. If you make the above fixes (replace hardcoded paths/username, add configurable env variables, and verify network behavior), the skill would look coherent and low-risk. As-is, treat it with caution.

Like a lobster shell, security has layers — review code before you run it.

fastvk97eyy64yh7evgkky9wk7ftkax827wbclatestvk97eyy64yh7evgkky9wk7ftkax827wbcmemoryvk97eyy64yh7evgkky9wk7ftkax827wbcollamavk97eyy64yh7evgkky9wk7ftkax827wbc

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments