Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Memoria Memory System

Manages AI assistant long-term memory with layered storage for facts, events, skills, context, and fast indexing, including backup and integrity tools.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 279 · 0 current installs · 0 all-time installs
byCedric@cuilinshen
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description match the included scripts (backup, migrate, rollback, health-check). However the registry metadata claims no required binaries/env, while SKILL.md and the scripts require Bash, jq, and tar — a metadata omission that reduces clarity about runtime needs.
!
Instruction Scope
Runtime instructions direct the agent (or user) to run shell scripts that perform file-system mutations (mkdir, cp, rm -rf, tar extraction, find -delete). The scripts accept --path arguments and read config.json; there is no path sanitization or safety checks, so a mis-set config or malicious/erroneous argument could overwrite or extract into arbitrary directories (e.g., dirname of MEMORY_PATH). Rollback uses rm -rf on MEMORY_PATH and extracts archives relative to dirname(MEMORY_PATH), which can be destructive if MEMORY_PATH is configured incorrectly.
Install Mechanism
There is no network-based install step in the skill manifest (instruction-only install spec). The code files are included in the skill bundle; nothing in the manifest downloads remote archives. This is lower install risk, but the provided scripts will be placed on disk and can be executed by the agent or user.
Credentials
The skill requests no credentials or environment variables. That is appropriate for a local filesystem-oriented memory manager. The SKILL.md does require local tools (bash, jq, tar) which are reasonable for the tasks.
Persistence & Privilege
always:false (normal). The skill can be invoked autonomously by the agent (disable-model-invocation:false), which combined with shell scripts that modify local files increases blast radius: an agent with this skill could create, backup, rollback, or delete the configured memory directory. This is expected for a management tool but worth confirming you trust autonomous actions.
What to consider before installing
This skill appears to implement the stated memory-management features, but review and take precautions before installing: 1) Verify jq, tar and Bash are available, and update the skill metadata to reflect these dependencies. 2) Inspect and edit config.json so memory.base_path and backup.path point to a safe, isolated directory you control (do not leave defaults if running from a high-privilege or home directory). 3) Avoid running rollback with --force or exposing the skill to untrusted agent autonomy until you are comfortable (consider setting disable-model-invocation:true if available). 4) Run memory-backup.sh --dry-run and memory-health-check.sh without --fix first to see actions. 5) Be cautious with cron installation: schedule only after manual verification. 6) If you need stronger safety, request path validation/whitelisting in the scripts (prevent operations outside a sandboxed memory path).

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
ai-assistantvk972cpyp5xnv6a6nj4decth9kd81xdkqbackupvk972cpyp5xnv6a6nj4decth9kd81xdkqcognitivevk972cpyp5xnv6a6nj4decth9kd81xdkqknowledge-managementvk972cpyp5xnv6a6nj4decth9kd81xdkqlatestvk972cpyp5xnv6a6nj4decth9kd81xdkqlong-term-memoryvk972cpyp5xnv6a6nj4decth9kd81xdkqmemoryvk972cpyp5xnv6a6nj4decth9kd81xdkq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Memoria System

Overview

Memoria System is a comprehensive long-term memory management system designed for AI assistants. It implements a human-like cognitive memory architecture with distinct layers for different types of information.

Memory Architecture

The system organizes memory into five distinct types, mirroring human cognitive structures:

1. Semantic Memory (semantic/)

Stores factual knowledge, concepts, and general information.

  • facts.md - Personal facts and key information
  • concepts.md - Learned concepts and knowledge
  • knowledge/ - Detailed knowledge entries

2. Episodic Memory (episodic/)

Records events, experiences, and conversations with timestamps.

  • YYYY-MM-DD.md - Daily memory logs
  • events/ - Specific event documentation

3. Procedural Memory (procedural/)

Contains skills, workflows, and learned procedures.

  • skills.md - Acquired skills and capabilities
  • workflows.md - Common procedures and workflows
  • scripts/ - Automation and utility scripts

4. Working Memory (working/)

Holds current session context and active tasks.

  • current.md - Active context and pending items
  • session/ - Session-specific data

5. Index (index/)

Provides fast lookup and search capabilities.

  • tags.json - Tag-based indexing
  • timeline.json - Chronological event index
  • search/ - Search indexes

Tools

memory-backup.sh

Creates incremental backups of the memory system.

Usage:

./memory-backup.sh [options]

Options:

  • --dry-run - Show what would be backed up without doing it
  • --verbose - Show detailed output
  • --path PATH - Override memory path
  • --output PATH - Override backup destination

memory-migrate.sh

Initializes new memory structures or migrates existing ones.

Usage:

./memory-migrate.sh {init|daily [DATE]|migrate [VERSION]}

Commands:

  • init - Initialize memory structure
  • daily [DATE] - Create daily memory file (default: today)
  • migrate [VERSION] - Migrate from specified version

memory-rollback.sh

Restores memory from a previous backup.

Usage:

./memory-rollback.sh {list|rollback BACKUP_NAME [--force]}

Commands:

  • list - List available backups
  • rollback BACKUP_NAME - Restore to specified backup

Options:

  • --force - Skip confirmation prompt

memory-health-check.sh

Validates memory integrity and optionally repairs issues.

Usage:

./memory-health-check.sh [options]

Options:

  • --fix - Automatically fix detected issues
  • --path PATH - Override memory path

Configuration

Edit config.json to customize behavior:

{
  "memory": {
    "base_path": "./memory",
    "structure": { ... }
  },
  "backup": {
    "enabled": true,
    "retention_days": 30,
    "schedule": "0 2 * * *"
  },
  "health_check": {
    "auto_fix": false,
    "check_interval_hours": 24
  }
}

Cron Setup

Add to crontab for automated maintenance:

# Daily backup at 2 AM
0 2 * * * cd /path/to/memoria-system && ./memory-backup.sh

# Weekly health check on Sundays at 3 AM
0 3 * * 0 cd /path/to/memoria-system && ./memory-health-check.sh --fix

Installation

openclaw skill install memoria-system

Requirements

  • Bash 4.0+
  • jq (for JSON processing)
  • tar (for backup compression)

License

MIT

Files

8 total
Select a file
Select a file to preview.

Comments

Loading comments…