openclaw-memoryos-memory-admin

• Outcome: Pass
• Latest audit: May 28, 2026, 11:50 AM
• Version:
  1.0.0

Overview

This is a transparent local MemoryOS administration skill, but it can read, export, back up, and change persistent long-term memory files.

Install this only if you want an agent to administer MemoryOS long-term memory. Before running mutating commands, verify the data root, user ID, assistant ID, backup directory, and export path; back up first; and review any text before adding it to persistent user or assistant memory.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 92% confidence
• Finding: The skill explicitly instructs the agent to inspect, back up, export, and update MemoryOS files, which implies read/write access to local storage, but it does not declare corresponding permissions. Undeclared file access weakens transparency and policy enforcement, making it easier for a caller or orchestrator to invoke a skill that can modify persistent long-term memory without clear consent or sandboxing expectations.

VirusTotal

VirusTotal findings are pending for this skill version.