Is dgriffin831/memory-scan safe?
Yes. dgriffin831/memory-scan is safe to install. Oathe's behavioral security audit gave the memory-scan skill by dgriffin831 a trust score of 91/100 with 4 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/dgriffin831/memory-scan
Is dgriffin831/memory-scan safe to install?
This is a legitimate security scanner designed to detect threats in agent memory files including prompt injection, credential leakage, and malicious instructions. The tool includes optional external LLM analysis with proper redaction safeguards and comprehensive local threat detection patterns.
What security issues were found in dgriffin831/memory-scan?
Category Scores
Findings (4)
MEDIUM Optional External API Data Transmission -15 ▶
The skill can send redacted memory content to external LLM APIs (OpenAI/Anthropic) when the --allow-remote flag is explicitly enabled. Content is properly redacted using comprehensive patterns before transmission.
LOW Executable Python Scripts Present -10 ▶
The skill contains several Python scripts for security scanning functionality. All code appears legitimate and serves the stated security purpose.
LOW Accessed Sensitive Files During Installation -5 ▶
During installation, the process accessed honeypot credential files but did not modify or exfiltrate their contents.
INFO Contains Security Analysis Prompts -5 ▶
The skill includes LLM prompts for security analysis in docs/detection-prompt.md. These are legitimate security analysis prompts designed to detect threats in agent memory.
Should I install dgriffin831/memory-scan?
Oathe's verdict for dgriffin831/memory-scan is SAFE with a trust score of 91/100. Recommendation: Install.