Memory Ops

• Analyzed: May 11, 2026, 5:00 AM
• Findings: 1
• Version: 0.1.2
• Hash: 50936726d4d6537b765eecab5ff1f9e91c14c9b443651981dc38c9891dcc4239
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed for memory management and auditing within a PostgreSQL database. While the `SKILL.md` instructions are benign and even include a positive security instruction ('Não salvar segredos sensíveis sem necessidade explícita'), the SQL files (`references/queries.sql`, `references/schema.sql`, `scripts/memory_ops_template.sql`) consistently use a hardcoded `user_id = 'ian'` and `agent = 'jarvis'`. This indicates a potential vulnerability related to multi-tenancy or user context management, where data might be inadvertently shared or accessed across users if the OpenClaw platform does not strictly enforce user isolation, classifying it as suspicious rather than benign due to this design flaw.