Back to skill
Skillv0.109.0
VirusTotal security
Reflective Memory · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignMay 1, 2026, 3:13 AM
- Hash
- f774728c97b1512a6f78f3cdd8f40e6751d0d1fe5cf9dea555fd2b228e1a8206
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: keep Version: 0.109.0 The 'keep' skill is a sophisticated reflective memory system for AI agents, providing persistent storage and semantic search for interactions and documents. The implementation demonstrates a high level of security maturity, incorporating explicit SSRF protections in the HttpDocumentProvider (keep/providers/documents.py), path traversal guards in file-handling actions (keep/paths.py), and defenses against image decompression bombs in OCR processing (keep/actions/ocr.py). While the skill performs deep integration by automatically modifying configuration files for various AI tools like Claude Code and GitHub Copilot to install operational hooks (keep/integrations.py), these actions are transparently documented and essential for its stated purpose of maintaining cross-session context. The build process also follows security best practices by using the --ignore-scripts flag during dependency installation (hatch_build.py).
- External report
- View on VirusTotal