oathe
Oathe Security Badge

Is fty4/memos safe?

Yes. fty4/memos is safe to install. Oathe's behavioral security audit gave the memos skill by fty4 a trust score of 95/100 with 2 findings, none critical or high. Report updated

https://github.com/openclaw/skills/tree/main/skills/fty4/memos

95
SAFE

Is fty4/memos safe to install?

This skill provides a clean interface to the Memos API for creating, reading, and managing memos. The code is well-structured with proper error handling and matches the documented functionality exactly.

What security issues were found in fty4/memos?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 95/100 · 25%
Code Execution 90/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 85/100 · 5%

Findings (2)

LOW Automatic tag injection -10 ▶

The skill automatically appends '#openclaw' tag to all created memos without explicitly requesting user permission for this modification

INFO Python code execution -10 ▶

Skill contains Python code that executes HTTP requests to user-configured Memos API endpoint

Should I install fty4/memos?

Oathe's verdict for fty4/memos is SAFE with a trust score of 95/100. Recommendation: Install.