ClawHub
Back to skill

Security audit

TurboQuant Context

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a local memory skill that stores and prunes conversation text, which fits its purpose but may retain sensitive information.

Install this only if you want a local persistent memory layer. Avoid sending secrets or confidential material you do not want retained, periodically inspect or clear ~/.openclaw/memory, and treat compact operations as deleting stored context rather than a harmless optimization.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The skill instructs the caller to ingest full message text into a persistent store under ~/.openclaw/memory and notes that the store survives session restarts, but it does not clearly warn users that potentially sensitive conversation content will be retained across turns. This creates a privacy and data-handling risk because secrets, personal data, or confidential prompts may be silently persisted longer than users expect.

Missing User Warnings

Medium
Confidence
83% confidence
Finding
The compact phase permanently removes entries from the store based on relevance, yet the documentation does not clearly warn that this is a destructive operation. Users may assume compaction is a harmless optimization and unintentionally lose retained context or records needed for later retrieval, which can affect reliability and auditability.

Static analysis

No suspicious patterns detected.