Memory Scan

• Analyzed: May 12, 2026, 3:19 AM
• Findings: 1
• Version: 1.0.0
• Hash: 64991b12204e81398bbdf2ddf7d0c405bc46d62e94ba3475c8dbe8e0a3d56262
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw Memory-Scan skill is a security scanner designed to detect malicious content, prompt injection, and credential leakage within an agent's internal memory files. It uses local pattern matching and optionally sends redacted content to legitimate OpenAI/Anthropic API endpoints for deeper LLM analysis. The skill's scripts (e.g., `memory-scan.py`, `quarantine.py`, `schedule-scan.sh`) and documentation (e.g., `SKILL.md`, `README.md`, `docs/detection-prompt.md`) consistently align with its stated security purpose, including safeguards like content redaction and opt-in quarantine with backups. There is no evidence of intentional harmful behavior, unauthorized data exfiltration, malicious execution, or prompt injection attempts against the agent to subvert its core functions.