Back to skill
Skillv1.0.5
ClawScan security
Mem9 · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 13, 2026, 3:51 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- This SKILL.md is a simple deprecation notice that tells the user to install the canonical mem9 skill from ClawHub; it contains no unexpected requirements or instructions.
- Guidance
- This file is only a deprecation/update notice and contains no active code. If you want the canonical mem9 functionality, run the suggested 'openclaw skills install c4pt0r/mem9-ai' only if you trust the c4pt0r/ClawHub source—installing a skill will download and run external code. Before installing, review the canonical skill's repository or listing on ClawHub (check owner reputation, release notes, and permissions) and avoid running the install command if you cannot verify the source. If you do not want to fetch external code, you can safely ignore this deprecated file.
Review Dimensions
- Purpose & Capability
- okThe file's stated purpose (deprecated local copy, point to canonical mem9 skill) matches the instructions provided. It does not request credentials, binaries, or other resources unrelated to telling the user how to update/install the canonical skill.
- Instruction Scope
- noteInstructions are limited to advising the user to run 'openclaw skills install c4pt0r/mem9-ai' or visit the ClawHub URL. This is consistent with a deprecation/update notice. Note: the suggested command will fetch code from the network (ClawHub), so installing the canonical skill is an action that pulls external code.
- Install Mechanism
- okThere is no install spec in this package and no code files to execute. The SKILL.md itself does not perform downloads; it simply instructs the user to run the OpenClaw CLI to install the canonical skill. The file does not reference any unsafe download URLs or direct archive extraction.
- Credentials
- okNo environment variables, credentials, or config paths are requested or referenced. Nothing in the file asks for secrets or unrelated permissions.
- Persistence & Privilege
- okDefault flags (always: false, user-invocable: true) are used. The skill does not request permanent presence or modify other skills' configurations; it only points to the canonical installer command.