Is ksemaj/lily-memory-5-0-0 safe?
Yes. ksemaj/lily-memory-5-0-0 is safe to install. Oathe's behavioral security audit gave the lily-memory-5-0-0 skill by ksemaj a trust score of 96/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/ksemaj/lily-memory-5-0-0
Is ksemaj/lily-memory-5-0-0 safe to install?
Lily Memory is a legitimate persistent memory plugin for OpenClaw agents that provides SQLite-based storage with FTS5 search and optional Ollama vector embeddings. The plugin implements proper security practices including SQL injection protection and input validation, with no signs of malicious behavior.
What security issues were found in ksemaj/lily-memory-5-0-0?
Category Scores
Findings (3)
LOW Shell Command Execution -15 ▶
Plugin executes sqlite3 CLI commands through Node.js execSync. This is legitimate functionality for database operations, and the code implements proper SQL injection protection via escapeSqlValue() function.
INFO Conversation Data Storage -10 ▶
As a memory plugin, this skill stores conversation facts and user data in SQLite databases. While this is the intended functionality, users should be aware that sensitive information may be persisted locally.
INFO Canary File Access -2 ▶
Monitoring detected access to honeypot files during installation. This appears to be from the monitoring system itself rather than the skill, and all files remained intact.
Should I install ksemaj/lily-memory-5-0-0?
Oathe's verdict for ksemaj/lily-memory-5-0-0 is SAFE with a trust score of 96/100. Recommendation: Install.