ClawHub

Minimal Memory

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed local memory organizer; it creates, searches, and archives workspace memory files without evidence of hidden access, networking, credential use, or destructive behavior.

Install only if you want the agent to keep local memory notes in the OpenClaw workspace. Avoid storing secrets or sensitive personal data, periodically review MEMORY.md and daily logs, and be aware that broad 'remember this' prompts may cause information to be retained for future use.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (3)

Vague Triggers

Medium
Confidence
96% confidence
Finding
The manifest description says the skill should be used for broad situations like "managing agent memory," "organizing knowledge," and "memory organization discussions," in addition to generic phrases like "remember this." These triggers overlap with common conversation and do not clearly bound when the skill should or should not activate, increasing the chance of accidental invocation.

Session Persistence

Medium
Category
Rogue Agent
Content
### Daily Memory
```bash
# Create today's memory file with template
~/.openclaw/skills/minimal-memory/scripts/daily.sh

# Add entry with auto-tagging
Confidence
60% confidence
Finding
Create today's memory file with template ~/.openclaw/skills/minimal-memory/scripts/daily.sh # Add entry with auto-tagging ~/.openclaw/skills/minimal-memory/scripts/add.sh GOOD "Browser tool works bet

Session Persistence

Medium
Category
Rogue Agent
Content
echo "- " >> "$TODAY_FILE"
fi

# Add entry to the file using sed
TEMP_FILE=$(mktemp)

# Find the section and add entry after the header
Confidence
80% confidence
Finding
Add entry to

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal