Lobster Memory System

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a disclosed local memory and backup guide, but users should review any external scripts before running them and understand that it creates persistent AI memory.

Before installing, treat this as a local persistent-memory system: inspect any referenced scripts before running them, decide whether you want scheduled backups enabled, and do not store API keys, private keys, passwords, or other secrets in memory files.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the user obtains and runs the referenced scripts from elsewhere, those scripts could do more than the reviewed skill documents show.

Why it was flagged

The documentation relies on helper scripts, but those scripts are not included in the reviewed artifacts, leaving their provenance and behavior outside this review.

Skill content
No code files present — this is an instruction-only skill. File manifest: INSTALL.md, SKILL.md, skill.yaml, _meta.json
Recommendation

Only run the referenced scripts after checking their source and contents, preferably from a trusted repository or signed release.

What this means

Running unreviewed setup scripts could modify local files or system settings beyond what the documentation describes.

Why it was flagged

The install guide asks the user to run PowerShell scripts with ExecutionPolicy bypass. This is a common setup pattern but should be reviewed because the scripts are not supplied here.

Skill content
powershell -ExecutionPolicy Bypass -File scripts/init.ps1
Recommendation

Inspect the PowerShell scripts before running them, and avoid using ExecutionPolicy bypass unless you trust the script source.

What this means

Stored memory may contain private information and can shape future agent responses if inaccurate, stale, or poisoned.

Why it was flagged

The skill is designed to persist and reload memory into future sessions, including identity, preferences, people, projects, and daily short-term memory.

Skill content
首次会话 → 加载全部记忆 ... 其他会话: 只加载 CORE/identity.json ... preferences.json ... 当日短期记忆
Recommendation

Regularly review memory files, avoid storing secrets, and keep clear rules for what may be written into long-term memory.

What this means

After setup, the backup process may continue running on a schedule and retain copies of memory data.

Why it was flagged

The skill documents scheduled persistence through Windows Task Scheduler for automatic daily backups.

Skill content
每日 18:00 自动备份,支持 Windows 任务计划
Recommendation

Enable scheduled backups only if desired, verify the scheduled task, and periodically review or clean old backup snapshots.