ClawHub
Back to skill

Security audit

Memory V2 Skill

Security checks across malware telemetry and agentic risk

Overview

This is a local SQLite memory skill with disclosed persistence and backups, but users should treat its stored memories and backup files as sensitive local data.

Install only if you are comfortable with the agent writing conversation-derived memory into a local SQLite database and retaining backup copies. Keep the database and backups out of shared folders, avoid searching for secrets because queries are logged locally, and prefer pinning/auditing dependencies before using it in sensitive environments.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Context-Inappropriate Capability

Medium
Confidence
98% confidence
Finding
The growth report query interpolates the caller-controlled `days` value directly into a SQL string inside `datetime('now', '-${days} days')`. Even in SQLite, direct string interpolation into SQL can enable SQL injection or query manipulation if an attacker can supply crafted input, and the local-only context does not remove the risk when other agent components may pass untrusted values.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The module logs raw search queries directly to the console, which can expose sensitive user input such as secrets, personal data, internal project names, or investigative terms to local logs and terminal history. In a memory system, queries are especially likely to contain sensitive context, so this creates an avoidable confidentiality risk even though no external API calls are made.

Missing User Warnings

Medium
Confidence
85% confidence
Finding
The documented restoreBackup and cleanupBackups operations can overwrite current state or permanently delete backups, yet the API reference provides no warning, confirmation requirements, or safety guidance. In a local memory system, these operations affect persistence and recovery, so misuse could cause irreversible data loss or rollback to stale state.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"author": "Chief of Staff",
  "license": "MIT",
  "dependencies": {
    "sqlite3": "^5.1.6"
  },
  "repository": {
    "type": "git",
Confidence
87% confidence
Finding
"sqlite3": "^5.1.6"

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.