ClawHub
Back to skill

Security audit

Scoped Memory Manager

Security checks across malware telemetry and agentic risk

Overview

This skill is coherent, but it enables a recurring background job that can rewrite and prune agent memory without enough safeguards.

Install only if you deliberately want automated memory maintenance. Before enabling the cron job, decide exactly which files it may read and modify, keep backups of MEMORY.md and topic files, require review before pruning or rewriting, and make sure you know how to disable the scheduled job.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs installing a recurring cron job that will autonomously read, prune, reorganize, and rewrite memory files on an ongoing basis, but it does not require explicit informed consent or warn that future automated modifications will continue after setup. This creates a persistence and integrity risk: the agent may silently alter or delete user-important memory content over time, especially because the job is scheduled in an isolated session and includes pruning and forgetting behaviors.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill tells the agent to proactively offer migration of an existing bloated MEMORY.md into topic files, but it does not require a warning that user data will be reorganized, split across files, or potentially pruned during consolidation. Because the skill's architecture explicitly includes decay and pruning, this can lead to unintended loss, semantic distortion, or reduced discoverability of important user instructions and history.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.