Memory Daily

Automates daily memory file management. Use when creating, reading, or appending to daily memory notes (memory/YYYY-MM-DD.md). Helps the agent maintain conti...

This skill appears to do exactly what it claims: create, read, and append local daily markdown files in a memory/ directory under the workspace. Before installing, confirm you are comfortable with the agent writing files to the workspace (DEFAULT_MEMORY_DIR is resolved relative to the skill directory). Consider: (1) review or override the memoryDir parameter if you want files placed somewhere specific and safe; (2) ensure the workspace does not contain sensitive secrets that could be written into memory notes; (3) the package contains duplicate files (harmless but unusual) — you can inspect the included index.js to verify behavior. Otherwise the footprint is local and coherent with the stated purpose.

Type: OpenClaw Skill Name: memory-daily Version: 1.0.0 The skill provides legitimate functionality for managing daily memory logs but contains a path traversal vulnerability in index.js. The read() and append() functions accept a 'date' parameter that is used in path.join() without sanitization, which could allow an agent to be manipulated into reading or writing files outside the intended directory. While the behavior aligns with the stated purpose, the lack of input validation on file paths is a high-risk vulnerability.