Memory System V2
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is a coherent local memory tool with no evidence of credential use or data exfiltration, but it does persist memories that can influence future sessions.
This appears safe to install if you want a local persistent memory system. Treat it like a durable notes store: do not auto-capture secrets, review $HOME/clawd/memory periodically, and ensure recalled memories do not override current user instructions or verified source files.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Memories may contain sensitive or outdated information and can be recalled in later sessions, potentially shaping future answers.
The tool stores captured content in persistent local markdown files and a JSON index for later search and consolidation.
MEMORY_DIR="$HOME/clawd/memory" ... echo "$content" >> "$daily_file" ... '.memories += [$entry]'
Only capture information you are comfortable retaining, periodically review or delete files under $HOME/clawd/memory, and verify recalled memories against current facts.
If memories are stale, incorrect, or adversarially captured, they could steer answers in those topic areas.
The skill recommends a pre-answer recall rule for certain topics, making stored memory context part of the agent’s response workflow.
Before answering anything about prior work, decisions, dates, people, preferences, or todos: run memory_search on MEMORY.md + memory/*.md
Use memory recall as supporting context, not as authority over the user’s latest instructions or current project files.