Llm Memory V9
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's code, instructions, and requested environment access are consistent with its stated purpose (linking a user-controlled private workspace into the skill); nothing demands unrelated credentials or network access.
This skill appears to do what it says: on install it optionally links or copies files from a user-specified local directory (CNB_PRIVATE_WORKSPACE) into the skill workspace. Before installing, ensure CNB_PRIVATE_WORKSPACE points only to the files you intend to expose to the skill (do not point it at your home directory, system config directories, or any path containing symlinks to sensitive files). If you don't need private configuration, install with hooks disabled (clawhub install llm-memory-integration --no-hooks). The package declares no network access and asks for no credentials, but the security of your data depends on the path you supply.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
No visible risk-analysis findings were reported for this release.