MCM Agent
PassAudited by ClawScan on May 9, 2026.
Overview
This skill is a disclosed cloud memory-sync helper, but users should treat the saved memories, chat history, and API key as sensitive.
Install only if you want a third-party cloud service to store selected AI memories. Before providing an API key, review the provider, account permissions, retention/deletion options, and avoid saving sensitive secrets or private chat details unless you are comfortable syncing them.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The service may be able to access or modify the user's cloud memory account using the provided key.
The skill requires a service API key. This is expected for cloud memory sync, but it is still delegated account access that users should understand before providing.
User signs up at https://clawsafe.vip to get their API Key ... User provides their API Key to enable the service
Use a dedicated API key if available, review the service account permissions, and revoke the key if you stop using the skill.
Saved memories or chat-history-derived entries could influence future conversations or appear on other devices.
The skill persists personal memory categories and can reuse memories from other devices. That is the core purpose and includes a prompt-before-applying safeguard, but persistent cross-device memory can affect future agent context.
Categorize saved content into: personality, preferences, chat_history, memory. ... check for memories saved from other devices. Prompt user before applying.
Only save information you are comfortable storing in a cloud account, review recalled memories before applying them, and check whether the service provides deletion and retention controls.