search-memory

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is a local memory search helper with disclosed indexing and caching, but the referenced scripts are not included in the provided artifact package.

This appears safe for a local memory-search skill. Before installing or using it, confirm that any scripts named scripts/index-memory.py and scripts/search-memory.py come from a trusted source, and remember that indexed memory files may be duplicated into memory/cache/.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill’s behavior depends on scripts that are not part of the provided package, so users should make sure those local scripts are trusted before running them.

Why it was flagged

The skill instructs use of helper scripts, but the provided manifest contains only SKILL.md and agents/openai.yaml, so the executable implementation is not included in the reviewed artifacts.

Skill content
scripts/index-memory.py
...
scripts/search-memory.py "your query" --top 5
Recommendation

Only run the referenced scripts if they exist in a trusted project or repository and you have reviewed or trust their source.

What this means

Private notes in memory files may be copied into a local search cache and later surfaced in search results.

Why it was flagged

The skill indexes local memory files and stores a persistent cache, which is expected for memory search but may preserve or reuse sensitive memory content.

Skill content
Index includes `MEMORY.md` plus `memory/**/*.md`. Cache lives under `memory/cache/`.
Recommendation

Keep sensitive material out of indexed memory files or review the cache location and exclusions before using the skill.