memory-management
Warn
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: MEDIUMPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The skill provides instructions to configure a recurring cron job (
0 4 * * * python3 ~/.openclaw/workspace/scripts/memory-janitor.py) to perform automated memory archival. - [COMMAND_EXECUTION]: The skill requires the execution of local Python scripts (
memory-janitor.py) with various flags (--stats,--dry-run) to manage system state and file organization. - [INDIRECT_PROMPT_INJECTION]: The memory management architecture is designed to ingest and process data from files such as
MEMORY.mdandmemory/lessons/*.jsonl, which may contain external or untrusted content. - Ingestion points:
MEMORY.mdandmemory/lessons/*.jsonl(found inSKILL.mdarchitecture description). - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the archived data.
- Capability inventory: Shell command execution via
python3and process isolation usingsetsid(specified in Core Principles). - Sanitization: No sanitization, escaping, or validation logic is described for the content being archived or recalled.
Audit Metadata