Context Memoize Cache

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:35 PM UTC
• Version:
  0.1.0

Overview

This is a small local context-cache skill with disclosed persistence and a scoped cache deletion command that deserves caution but does not show malicious behavior.

Before installing, understand that saved fragments may be loaded into future sessions. Do not cache secrets, credentials, or untrusted instructions unless you intend them to persist, and only run the clear-cache command when you intentionally want to delete the saved cache directory.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill documents a destructive cache-clearing command using `rm -rf ~/.openclaw/context-cache/` without any warning, confirmation step, or safer alternative. Even though the path is scoped to a cache directory, normalizing destructive deletion in an agent skill increases the chance of accidental data loss if invoked automatically, copied incorrectly, or modified unsafely.

VirusTotal

66/66 vendors flagged this skill as clean.