ClawHub
Back to skill

Security audit

Agent Memory Patterns

Security checks across malware telemetry and agentic risk

Overview

This is a local memory-management guide that can retain and search agent notes over time, but its behavior is visible, purpose-aligned, and not automatically installed or networked.

Install this only if you want an agent to maintain local persistent memory. Review paths before running any example scripts or cron entries, do not store secrets or sensitive personal data in memory files, and periodically prune or archive old notes so future agent context remains appropriate.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The skill repeatedly creates, appends, moves, and archives files under a persistent workspace, yet it does not prominently warn that running these procedures modifies long-lived state. In an agent context, silent file mutation can lead to unintended persistence, corruption of prior notes, or operational side effects without informed user approval.

Ssd 3

Medium
Confidence
91% confidence
Finding
These instructions establish persistent daily logging of interactions and events, then prepare them for later consolidation without any minimization, retention, or sensitivity filtering. In a persistent agent, that can cause overcollection of user data, secrets, or sensitive context that remains accessible long after the original session.

Ssd 3

Medium
Confidence
93% confidence
Finding
The weekly curation step automatically extracts and centralizes prior memory contents into a long-term file, increasing persistence and discoverability of sensitive information. Because there are no approval gates or sanitization controls, benign daily notes can be elevated into durable long-term storage where they are harder to review and remove.

Ssd 3

Medium
Confidence
90% confidence
Finding
The search functions are designed to surface content across both long-term and recent memory stores, which can broadly expose previously logged information to later sessions or users. In a persistent-agent environment, unrestricted retrieval magnifies the harm of overcollection by making historical sensitive data easy to redisclose.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.