Auto Memory

• Analyzed: May 11, 2026, 6:25 AM
• Findings: 1
• Version: 3.0.0
• Hash: f25ffb44b84b81a196d322063f6961d39d3527f3fdd858afc033138118749144
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'auto-memory' skill is a legitimate utility designed to provide long-term memory capabilities for OpenClaw agents by processing session logs into structured Markdown files and vector indices. The scripts (extract-memory.sh, smart-summarize.sh, etc.) perform file operations within the expected ~/.openclaw directory and include explicit logic to detect and redact sensitive information like API keys and passwords before storage or LLM processing. While smart-summarize.sh accesses the user's openclaw.json to retrieve API credentials, it only uses them to communicate with the user's own configured LLM provider for the purpose of generating summaries, with no evidence of data exfiltration or malicious intent.