Is rajwaitforit/memory-sync safe?
Yes. rajwaitforit/memory-sync is safe to install. Oathe's behavioral security audit gave the memory-sync skill by rajwaitforit a trust score of 91/100 with 3 findings, none critical or high.
https://github.com/rajwaitforit/memory-sync
Is rajwaitforit/memory-sync safe to install?
This OpenClaw skill provides legitimate cross-channel memory synchronization functionality by collecting and sharing user context across Discord, Telegram, and webchat sessions. While it involves extensive personal data collection, this appears necessary for its stated purpose and no malicious code or external data exfiltration was detected.
What security issues were found in rajwaitforit/memory-sync?
Category Scores
Findings (3)
MEDIUM Cross-channel personal data collection -15 ▶
The skill explicitly collects personal information, preferences, decisions, and project context from all OpenClaw channels and centralizes it in memory files. While legitimate for the stated purpose, this creates a comprehensive profile of user activities.
LOW Aggressive data collection instructions -5 ▶
The skill instructs agents to write meaningful user information to memory 'RIGHT NOW in the same turn' which could be seen as overly aggressive data collection behavior.
LOW Potential surveillance concerns -25 ▶
The automatic scanning of all user sessions every 2 hours combined with cross-channel data aggregation could be used for surveillance purposes if the system is compromised.
Should I install rajwaitforit/memory-sync?
Oathe's verdict for rajwaitforit/memory-sync is SAFE with a trust score of 91/100. Recommendation: Install with caution.