Self-improving Agent Memory Upgrade (SurrealDB)

• Analyzed: May 12, 2026, 3:44 AM
• Findings: 1
• Version: 2.3.0
• Hash: 5b7f8e150b3f4d08941cbefbbd3642fe17a88a4c200b5be62b225797b0d9ad80
• Source: palm
• External report: View on VirusTotal

Findings (1)

This skill bundle implements a complex knowledge graph memory system with several high-risk capabilities that, while documented and aligned with its stated purpose, present a significant attack surface. Key indicators include 'scripts/integrate-openclaw.sh' which uses sed to patch the host application's source code (opt-in via --apply), 'scripts/install.sh' which contains an optional curl|sh network installer, and 'scripts/extract-knowledge.py' which reads workspace files and sends their content to the OpenAI API. Additionally, the skill registers multiple cron jobs for background extraction and relationship discovery, and performs automatic context injection into agent prompts, although it includes a security filter in 'scripts/mcp-server-v2.py' to prevent the injection of sensitive strings like API keys or passwords.