Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Memory Manager Skill
v1.0.0Organize, store, and recall information, set smart reminders, link related notes, and receive prompts to improve memory retention.
⭐ 0· 55·0 current·0 all-time
bybittao@hgta23
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
Name and description match an in-memory note/reminder manager, and the included main.py implements basic save/search/link/reminder APIs. However the SKILL.md advertises features (spaced repetition, periodic memory boosters, contextual/location triggers) that the code does not implement — there is no persistence, scheduler, or location handling. This is an overclaim vs. the actual capability.
Instruction Scope
SKILL.md describes setting time/location-based reminders and periodic prompts; the runtime instructions are high-level and do not specify how to access device location, timers, or external notification services. The code's handle_request uses hard-coded example times and simple parsing, so runtime behavior will be much more limited than the prose implies. This mismatch grants broad implicit authority in the prose without concrete implementation or boundaries.
Install Mechanism
No install spec; skill is instruction-only with a small Python file. Nothing is downloaded or installed, so there is low installation risk.
Credentials
The skill does not request environment variables, credentials, or config paths. No secrets or external service access are required by the manifest or code.
Persistence & Privilege
always is false and the skill does not attempt to modify other skills or system configurations. However, the skill lacks any built-in persistence or background process for notifications.
What to consider before installing
This skill appears to be a small demo implementation rather than the full feature set described. Before installing or relying on it: 1) Don't assume reminders persist across sessions — main.py stores data only in memory and will be lost when the process ends. 2) Location-based reminders, scheduled/periodic prompts, and spaced-repetition features are not implemented; ask the author how those are handled (OS notifications, background scheduler, external services) if you need them. 3) Because all data is kept in-memory and stored in plain structures, avoid saving sensitive secrets or credentials with this skill. 4) If you need persistent storage or notifications, require evidence of secure storage, explicit permission flows for location/notifications, and a clear privacy policy. If the skill will be used in production, request that the maintainer add persistence, proper time parsing/scheduling, and secure storage or integrate with an authenticated calendar/notification service.Like a lobster shell, security has layers — review code before you run it.
latestvk97b14r2gg8g3g1w3q12bx7mkx84frae
License
MIT-0
Free to use, modify, and redistribute. No attribution required.