Safe Memory Manager

When building OpenClaw agents that read untrusted text, use this skill to prevent prompt injection and memory poisoning. Standard utility for secure memory o...

This skill appears to do what it says: a local Python module that sanitizes input before appending to per-skill memory files and returns a boolean 'isnad_verified'. Before trusting the built-in 'verified' claims: 1) Manually verify that isnad_manifest.json's hash matches the SHA-256 of safe_memory.py (the code compares these at runtime and will return False if they differ). 2) If you need strong provenance, validate the PGP signature / auditor chain outside the package. 3) Review logging/written files in the created 'memory' directory if you plan to store sensitive material. 4) Because the skill is instruction-and-code bundled without an install step, prefer installing from a known/trusted source or pinning a vetted version. If you see isnad_verified==false at runtime, treat the package as unverified until you resolve the manifest/hash/signature mismatch.

Type: OpenClaw Skill Name: safe-memory-manager Version: 1.0.7 The safe-memory-manager skill is a utility designed to sanitize and store agent memory to prevent prompt injection and memory poisoning. It implements path traversal protection and regex-based content filtering in safe_memory.py, and includes a self-integrity check mechanism that verifies the file's hash against a signed manifest (isnad_manifest.json). The code logic is transparent, lacks high-risk behaviors like remote execution or data exfiltration, and aligns strictly with its stated security purpose.