ClawHub
Back to skill

Security audit

Lethe Memory

Security checks across malware telemetry and agentic risk

Overview

This is a local persistent-memory helper that stores and recalls selected work context, with privacy precautions users should understand.

Install this only if you want an agent to use a local Lethe service as persistent memory. Keep LETHE_API unset unless you intentionally use remote storage, do not expose the local port, avoid logging secrets or personal data, and set LETHE_SESSION_ID explicitly if multiple sessions or users share the machine.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The script implicitly reads the active session ID from a local SQLite database and uses it for subsequent operations without explicit user confirmation. In a memory/logging skill, this can cause unintended access to or modification of another active session's data, especially on shared systems or when multiple sessions exist.

Missing User Warnings

Low
Confidence
80% confidence
Finding
Exporting LETHE_SESSION_ID makes the active session identifier available to child processes unnecessarily, increasing the risk of accidental leakage through subprocess environments, logs, or diagnostics. While the value is not a secret by itself in all deployments, it is session-scoped metadata that can facilitate unauthorized writes if combined with API access.

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.