Looki Memory

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing and using the skill can let the assistant access whatever the Looki API key is authorized to retrieve.

Why it was flagged

The skill handles an API key and account endpoint, giving the agent delegated access to the user's Looki account.

Skill content
On first use, check if this file exists. If it does, read `base_url` and `api_key` from it. If it does not, ask the user for both values and offer to save them to this file.
Recommendation

Use a dedicated or revocable Looki API key if possible, confirm the base URL, and remove the local credentials file if you stop using the skill.

What this means

Responses generated with this skill could reveal private real-world context about you or people around you.

Why it was flagged

The skill is designed to retrieve persistent, real-world personal memory data that may include locations, relationships, activities, images, video, or audio.

Skill content
Looki gives you a digital memory captured by the Looki L1 wearable, which sees and hears moments throughout your day... the places you went, the people you met, and the things you did
Recommendation

Invoke the skill only when that context is needed, prefer narrow date/topic requests, and avoid sharing generated outputs that include private memory details.

What this means

You have less external information to confirm who maintains the skill or whether the documented Looki integration is official.

Why it was flagged

The registry metadata does not provide a public source or homepage for independently verifying this instruction-only integration.

Skill content
Source: unknown; Homepage: none
Recommendation

Verify the Looki service, base URL, and API key source through trusted channels before providing credentials.