White Stone Memory
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Saved memory entries may influence later agent responses and tasks across sessions or sub-agents.
The skill intentionally reuses persistent memory across future agent runs and sub-agents, which is core to its purpose but can affect future behavior if the memory files contain stale, sensitive, or malicious content.
Error log is global — All Agents must load on startup ... Knowledge loads at startup
Review and curate global memory files regularly, and avoid storing secrets, credentials, or untrusted instructions in auto-loaded memory.
If enabled, the skill may rely on your Gemini API key and associated account quota or permissions.
Optional vector search can use a Gemini API key. This is disclosed and purpose-aligned, but users should understand that enabling it grants the configured provider credential for embedding/search functionality.
Gemini API | 提供 `GEMINI_API_KEY` 环境变量
Use a scoped, revocable API key where possible, keep it in environment variables, and leave vector search disabled if you do not need it.
If Gemini is chosen for embeddings, memory content used for indexing may be processed outside the local machine; local Ollama is the more privacy-preserving option.
The documented semantic indexing can use either a local embedding model or an external provider, but the artifact does not describe data-handling boundaries for memory text processed through the provider option.
Embedding | Gemini API 或 Ollama + qwen3-embedding-0.6B ... `/memory build-index`
Use local Ollama for sensitive memories, or review the external provider’s privacy and retention terms before enabling Gemini-based vector search.