Amygdala Memory

• Analyzed: May 12, 2026, 3:13 AM
• Findings: 1
• Version: 1.7.0
• Hash: 9ce4b566f0715a6bae8efe27583a3aed1621c297db9fb415127e447f2dbecf0e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its broad access to sensitive data and the use of direct agent instructions (prompt injection surface) to process this data. Specifically, `scripts/preprocess-emotions.sh` reads the full conversation history from `$HOME/.openclaw/agents/$AGENT_ID/sessions/*.jsonl`. The `install.sh` script sets up cron jobs that instruct the AI agent via `--agent-turn` to execute `encode-pipeline.sh`, which in turn processes this sensitive conversation data. While the stated purpose is emotional processing, this capability presents a significant vulnerability, as a compromised agent could be instructed to exfiltrate this sensitive data.