Tinmem Memory System

Provides persistent memory management for storing, retrieving, updating, and deleting user-related information across conversations in OpenClaw AI.

Before installing or enabling this skill, ask the developer or registry operator to clarify: (1) Where exactly are memories stored (filesystem path)? Who can access that storage? (2) Is data encrypted at rest and in transit? (3) How is 'automatic extraction after each turn' scoped—what data is captured and under what rules? (4) How does memory_forget guarantee deletion (and is deletion propagated to backups)? (5) Are there retention and consent controls? (6) Who operates the LanceDB instance and what permissions does it need? If you cannot get clear answers and a trustworthy source code or homepage, treat this as high-risk for privacy and test only in a sandboxed environment or decline to install.

Type: OpenClaw Skill Name: tinmem Version: 1.0.0 The OpenClaw Tinmem skill bundle is classified as suspicious due to significant prompt injection vulnerabilities identified in `SKILL.md`. The `memory_store` and `memory_update` tools allow an attacker to store arbitrary content, which is then 'automatically injected into context before each response'. This creates a persistent prompt injection risk, enabling an attacker to manipulate the agent's future behavior. Furthermore, the `memory_recall` tool can retrieve 'full content' (L2) of potentially sensitive memories (e.g., user profiles, entities), and `memory_forget` could be used to erase critical information or audit trails, facilitating data exfiltration or evasion through agent manipulation.