Datris Memory

PassAudited by VirusTotal on May 7, 2026.

Overview

Type: OpenClaw Skill Name: datris-memory Version: 1.0.1 The `datris-memory` skill facilitates long-term semantic memory by syncing local markdown files (e.g., `MEMORY.md`) to a Datris MCP server. It implements structured workflows for incremental synchronization, provenance tracking via filenames, and audit logging in `memory/*.md`. The instructions are transparent, include safety checks like user confirmation for destructive actions, and lack any indicators of malicious intent, data exfiltration beyond the stated scope, or unauthorized execution.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Private or inaccurate content in MEMORY.md or memory/*.md may be retained in Datris and reused in future memory answers.

Why it was flagged

The skill intentionally creates a persistent semantic memory index from local markdown memory files, which can later influence retrieval and agent context.

Skill content
Datris is the long-term semantic memory layer. Local memory files are the source of truth. Datris is rebuilt from them
Recommendation

Review the local memory files before ingestion, avoid storing secrets or highly sensitive data there, and treat retrieved memory as context to verify rather than unquestionable truth.

What this means

The configured Datris MCP server and Datris backend may receive and store the contents of the local memory files.

Why it was flagged

The skill depends on an MCP server boundary and uploads local memory data through Datris tooling, so the user must trust that MCP endpoint and its data handling.

Skill content
Use the Datris Platform as a long-term semantic memory layer through the Datris MCP server
Recommendation

Use only a trusted Datris MCP server/account, verify where the data is stored, and confirm the Datris retention and access controls match your expectations.

What this means

A sync or re-ingestion run may modify or temporarily remove Datris search results for the indexed memory files.

Why it was flagged

The skill instructs the agent to perform mutating Datris operations, including deleting and re-uploading index chunks. This is aligned with keeping the Datris index synchronized, but it changes external Datris state.

Skill content
When re-ingesting a file that already exists in the pipeline, delete its existing chunks first, wait for the delete to complete, then upload
Recommendation

Confirm that local markdown files are the intended source of truth and that Datris index changes are acceptable before running ingestion or sync.

What this means

Ordinary questions about past notes may cause the agent to consult or initialize the Datris memory layer.

Why it was flagged

The skill asks to be invoked broadly for memory-related requests, including when the user does not explicitly mention Datris. This is purpose-aligned but expands when Datris memory behavior may be used.

Skill content
Use this skill any time the user mentions saving, recalling, ingesting, syncing, or searching memory through Datris — and any time they ask a memory-shaped question
Recommendation

If you install it, expect Datris to be the default memory retrieval path; ask the agent to avoid Datris for a task if you want purely local handling.