Memory Scan

Scans OpenClaw agent memory files and workspace configs for malicious content, credential leaks, prompt injections, and security threats.

This package is plausibly a legitimate memory-scanner, but there are important mismatches and operational behaviors to verify before installing: - Metadata vs reality: The registry declares no env vars, but the scripts/docs require OPENAI_API_KEY or ANTHROPIC_API_KEY for remote scanning and OPENCLAW_ALERT_CHANNEL for scheduling. Ask the author to update metadata or be prepared to provide these values. - Remote scanning is opt-in (--allow-remote) and the code claims to redact sensitive tokens before sending, but any remote analysis sends content to external LLMs. If you care about leaked secrets or privacy, avoid --allow-remote or review redaction regexes carefully. - The skill calls the openclaw CLI to read gateway config and to create scheduled jobs. Confirm you trust the openclaw CLI and the exact cron job payload before running schedule-scan.sh. - Quarantine modifies workspace files (backups in .memory-scan/quarantine and redacts lines). That behavior is documented and opt-in, but you should review backup locations and permissions. - Review the included code yourself or run the scanner in an isolated/test workspace first (e.g., copy ~/.openclaw/workspace to a safe test directory), especially if you plan to enable scheduling or remote LLM analysis. If you decide to proceed: run only the local pattern scan first (no --allow-remote), verify the tool's output on test files, confirm the cron job payload, and only install/setup the venv and schedule if you understand and accept the credential and scheduling implications.

Type: OpenClaw Skill Name: memory-scan Version: 1.0.0 The OpenClaw Memory-Scan skill is a security scanner designed to detect malicious content, prompt injection, and credential leakage within an agent's internal memory files. It uses local pattern matching and optionally sends redacted content to legitimate OpenAI/Anthropic API endpoints for deeper LLM analysis. The skill's scripts (e.g., `memory-scan.py`, `quarantine.py`, `schedule-scan.sh`) and documentation (e.g., `SKILL.md`, `README.md`, `docs/detection-prompt.md`) consistently align with its stated security purpose, including safeguards like content redaction and opt-in quarantine with backups. There is no evidence of intentional harmful behavior, unauthorized data exfiltration, malicious execution, or prompt injection attempts against the agent to subvert its core functions.