Agent Memory Layer

AdvisoryAudited by Static analysis on May 12, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Information saved as long-term memory may remain on disk and influence future agent responses until the stored files are removed or managed.

Why it was flagged

The library stores long-term memory to a persistent local JSON file under .agent_memory, so content provided to the memory layer can be retained and reused later.

Skill content
base = storage_dir or Path(f".agent_memory/{agent_id}") ... self.long_term = LongTermMemory(base / "long_term.json")
Recommendation

Avoid storing secrets or highly sensitive personal data in agent memory, and periodically review or delete the .agent_memory directory if persistence is not desired.

NoteMedium Confidence
ASI10: Rogue Agents
What this means

If configured as a scheduled job, the skill could keep updating long-term memory without direct interaction each time.

Why it was flagged

The script is documented as something a user may run periodically to promote memories, which is aligned with the memory purpose but introduces background persistence if the user configures cron.

Skill content
Consolidation daemon — promotes recurring episodic memories to long-term. Run periodically via cron.
Recommendation

Only schedule the consolidation script if you want automatic memory promotion, and make sure you know where the memory files are stored.