Fast Unified Memory

PassAudited by ClawScan on May 10, 2026.

Overview

This is a coherent local memory/search helper that persists and searches local memories using local Ollama, with setup and path-scope caveats but no evidence of exfiltration or destructive behavior.

Before installing, verify the Ollama setup command, make sure the hard-coded OpenClaw memory path matches your own workspace, and avoid adding highly sensitive information unless you are comfortable keeping it in a local plaintext JSON memory store.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Sensitive or incorrect memories added through this tool may remain on disk and be reused in future agent interactions.

Why it was flagged

The skill persists user-added memory text and embeddings so they can be retrieved in later searches.

Skill content
store.memories.push({ ... memory: text, user_id: userId, embedding, ... }); saveMem0Store(store);
Recommendation

Only add memories you are comfortable retaining locally, and periodically review or remove ~/.mem0/fast-store.json if needed.

What this means

The tool may fail to search the intended workspace, or in unusual shared/privileged environments may read memory files from that specific local path if accessible.

Why it was flagged

The skill searches local OpenClaw memory files, but the path is hard-coded to a specific home directory instead of dynamically using the installing user's home.

Skill content
const MEMORY_DIR = '/home/broedkrummen/.openclaw/workspace/memory'; ... FS.readdirSync(MEMORY_DIR).filter(f => f.endsWith('.md'))
Recommendation

Check and adjust the OpenClaw memory path before use so it points only to the workspace you intend to search.

What this means

Running a remote install script gives that script control over the local environment during setup.

Why it was flagged

The documented setup asks the user to execute a remote installer script for Ollama.

Skill content
curl -fsSL https://ollama.ai/install.sh | sh
Recommendation

Install Ollama from a trusted source, review the installer when possible, and avoid running the command with unnecessary privileges.