Memory Tiering

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is purpose-aligned for memory organization, but it can reorganize persistent memory files that may contain personal facts, logs, and credential references.

This skill appears benign and coherent for memory tiering. Before installing, make sure you are comfortable with it reading and reorganizing memory files and recent logs, and avoid keeping raw credentials or highly sensitive details in those memory tiers.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Information moved or summarized into persistent memory could affect future agent behavior or retain details longer than expected.

Why it was flagged

The skill instructs the agent to read persistent memory tiers and recent logs, which can influence future context and may contain personal or project-sensitive information.

Skill content
Read all three tiers and recent daily logs (`memory/YYYY-MM-DD.md`).
Recommendation

Review the memory files before and after tiering, and avoid storing sensitive secrets or unverified claims in persistent memory.

What this means

If raw credentials are placed in memory, they could be retained or exposed in later context.

Why it was flagged

The HOT memory tier may include temporary credentials; the skill also advises referencing root files rather than storing raw secrets, which is a mitigating but still sensitive credential-handling pattern.

Skill content
**Focus**: Current session context, active tasks, temporary credentials, immediate goals.
Recommendation

Keep secrets out of memory files when possible, and store only non-sensitive references or paths with appropriate access controls.

What this means

Memory content may be changed after compaction without a separate explicit 'run memory tiering' request.

Why it was flagged

The skill can run its memory reorganization workflow automatically after compaction, including pruning and summarization of persistent memory, though this is disclosed and aligned with its purpose.

Skill content
Trigger automatically after any `/compact` command.
Recommendation

Use this skill when automatic post-compaction memory cleanup is desired, and consider asking the agent to show planned changes before editing memory files.