ClawHub
Back to skill

Security audit

Engram

Security checks for vulnerabilities and agentic risk

Overview

This is a local AI memory skill, but it encourages broad persistent recall and raw conversation storage without enough user control or privacy guidance.

Install only if you want an agent to keep local memory across sessions. Avoid storing raw transcripts, credentials, health, financial, client, or proprietary data unless you have explicit reason and a way to review and delete it. Prefer a pinned, reviewed npm version before installing.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:9
Finding

Unpinned Third-Party npm Dependency

Content
View full analysis
Remediation
View remediation

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Session Persistence

Medium
Category
Rogue Agent
Confidence
90% confidence
Finding

Maintaining context across sessions is an intentional feature, but it creates a real session-persistence risk because information from one interaction can influence future ones without fresh user awareness. In a semantic memory tool, that increases the chance of retaining stale, private, or cross-context data and surfacing it later inappropriately.

Content

Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.

md
---
name: engram
description: "Persistent semantic memory for AI agents — local, fast, free. Use when agent needs to recall past decisions, store new facts/preferences, search conversation history, or maintain context across sessions."
metadata:
  openclaw:
    emoji: "🧠"

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The activation guidance is very broad: the skill is framed for recalling past decisions, storing facts/preferences, searching history, and maintaining context across sessions. That breadth can cause an agent to invoke persistent memory in many ordinary conversations, increasing the chance that unnecessary or sensitive user data is stored or queried without clear need or consent.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

The documentation shows piping raw conversation text directly into persistent storage but does not warn that this may retain sensitive personal, financial, health, credential, or proprietary information across sessions. In a memory skill, omission of this warning makes accidental over-collection and long-term retention much more likely.

Content

No source excerpt is available for this finding.

Ssd 3

Medium
Category
Not specified by scanner
Confidence
97% confidence
Finding

The example echo "Raw conversation text" | engram ingest explicitly encourages verbatim ingestion of conversations into persistent memory. In this skill's context, that can capture secrets or sensitive user data in plain-language workflows and make it retrievable later through semantic search, broadening exposure beyond the original session.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.