ClawHub
Back to skill

Security audit

Looki Memory

Security checks across malware telemetry and agentic risk

Overview

This skill accesses very private Looki wearable memory data and an API key, but the behavior is disclosed, read-only, and aligned with its stated purpose.

Install only if you want the assistant to access your Looki personal memory, including places, people, media, journals, profile data, and latest realtime events. Treat ~/.config/looki/credentials.json as a sensitive secret file, avoid using it on shared machines, and remove the saved API key if you no longer want agents to access the account.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill handles extremely sensitive lifelogging data, including places visited, people met, journals, media, and realtime events, but the description does not clearly warn the user about the breadth and sensitivity of that access. In this context, lack of informed-consent messaging increases the risk of users invoking the skill without understanding the privacy implications.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The setup flow offers to persist the API key to a local credentials file without clearly warning the user that this stores a sensitive secret on disk. Even though the file path is scoped to the user config directory, users should be informed of local credential-storage risk, especially on shared or backed-up systems.

Credential Access

High
Category
Privilege Escalation
Content
Looki gives you a digital memory captured by the Looki L1 wearable, which sees and hears moments throughout your day. This skill lets AI assistants access your real-world context — the places you went, the people you met, and the things you did — so they can help in ways that go beyond what's on your screen. Use it when you want more personalized, context-aware, data-driven responses.

**Base URL:** Read from `~/.config/looki/credentials.json` → `base_url` field. If the file does not exist, ask the user for both `base_url` and `api_key`.

**Security:**
Confidence
82% confidence
Finding
credentials.json

Credential Access

High
Category
Privilege Escalation
Content
## Setup

**Credentials file:** `~/.config/looki/credentials.json`

On first use, check if this file exists. If it does, read `base_url` and `api_key` from it. If it does not, ask the user for both values and offer to save them to this file.
Confidence
84% confidence
Finding
credentials.json

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.