persistent-agent-memory

by openclaw

Add persistent memory to any agent so it can remember prior work, maintain context across sessions, and continue long-running workflows. Use when: (1) remembering facts or preferences for later, (2) recalling stored memories by topic or intent, (3) forgetting/removing memories matching a query. NOT for: web search, file system search, or code search — use other tools for those.

Scanned

Risk

Low Risk

Status

warning

Findings

Last Scanned

3/12/2026

View on GitHub →

Discussion

No comments yet. Be the first to share your thoughts.

Scan Report

Duration

6.7s

Rules checked

147

Scanned at

3/12/2026, 8:02:29 PM

Scanners3/5 ran

clawguard-rules▸

1 finding7ms

PERM-005—Skill attempts to manipulate persistent memory or system configuration(/tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory/SKILL.md:3)

View logs

clawguard-rules7ms

1[2026-03-12T20:02:22.516Z] Running @yourclaw/clawguard-rules pattern matcher
2Scanning: /tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory/SKILL.md
3Content length: 3430 chars
4Patterns matched: 1
5  [high] PERM-005: Skill attempts to manipulate persistent memory or system configuration
6✓ Completed in 7ms

gitleaks▸

0 findings1403ms

No findings — all checks passed.

View logs

gitleaks1403ms

1[2026-03-12T20:02:23.919Z] $ gitleaks detect --source /tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory --report-format json --report-path /dev/stdout --no-git
2
3⚠ stderr output:
4○
5    │╲
6    │ ○
7    ○ ░
8    ░    gitleaks
9
10[90m8:02PM[0m [31mFTL[0m [1mReport path is not writable: /dev/stdout[0m [36merror=[0m[31m[1m"open /dev/stdout: no such device or address"[0m[0m
11
12Process exited with code 1
13✓ Completed in 1403ms

semgrep▸

0 findings6675ms

No findings — all checks passed.

View logs

semgrep6675ms

1[2026-03-12T20:02:29.193Z] $ semgrep scan --json --quiet --config auto /tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory
2{"version":"1.155.0","results":[],"errors":[],"paths":{"scanned":["/tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory/SKILL.md","/tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory/_meta.json"]},"time":{"rules":[],"rules_parse_time":1.215329885482788,"profiling_times":{"config_time":1.7561676502227783,"core_time":1.749359369277954,"ignores_time":0.0016102790832519531,"total_time":3.511713743209839},"parsing_time":{"total_time":0.0,"per_file_time":{"mean":0.0,"std_dev":0.0},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_files":[]},"scanning_time":{"total_time":0.02328777313232422,"per_file_time":{"mean":0.004657554626464844,"std_dev":2.0967694727005437e-05},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_files":[]},"matching_time":{"total_time":0.0,"per_file_and_rule_time":{"mean":0.0,"std_dev":0.0},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_rules_on_files":[]},"tainting_time":{"total_time":0.0,"per_def_and_rule_time":{"mean":0.0,"std_dev":0.0},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_rules_on_defs":[]},"fixpoint_timeouts":[],"prefiltering":{"project_level_time":0.0,"file_level_time":0.0,"rules_with_project_prefilters_ratio":0.0,"rules_with_file_prefilters_ratio":0.9693877551020408,"rules_selected_ratio":0.030612244897959183,"rules_matched_ratio":0.030612244897959183},"targets":[],"total_bytes":0,"max_memory_bytes":1106926656},"engine_requested":"OSS","skipped_rules":[],"profiling_results":[]}
3
4Process exited with code 0
5✓ Completed in 6675ms

mcp-scan▸

error

mcp-scan error: Command 'mcp-scan' failed: [33mWARNING: The 'mcp-scan' package has been renamed to 'snyk-agent-scan'. Please update your installation and use 'uvx snyk-agent-scan@latest' instead.

View logs

mcp-scan1755ms

1[2026-03-12T20:02:24.275Z] $ mcp-scan --skills /tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory --json
2
3⚠ stderr output:
4[33mWARNING: The 'mcp-scan' package has been renamed to 'snyk-agent-scan'.
5Please update your installation and use 'uvx snyk-agent-scan@latest' instead.
6
7✗ mcp-scan error: Command 'mcp-scan' failed: [33mWARNING: The 'mcp-scan' package has been renamed to 'snyk-agent-scan'.
8Please update your installation and use 'uvx snyk-agent-scan@latest' instead.
9
10
11Process exited with code 1
12✓ Completed in 1755ms

npm-audit▸

No package.json found — skipping npm audit

View logs

npm-audit0ms

1No package.json found at /tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory/package.json
2Skipping npm audit.

Files analyzed

SKILL.md

Rules coverage147 patterns

prompt injection

secrets

malware

permissions

Security Findings

HighPERM-005clawguard-rulespermissions

Skill attempts to manipulate persistent memory or system configuration

/tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory/SKILL.md:3

Evidence: Add persistent memory

Scan History1 scan

▸Warningd898090

Low Risk1 finding3/12/2026

critical

high

medium

low

info

Scanners3/5 ran

clawguard-rules▸

1 finding7ms

PERM-005—Skill attempts to manipulate persistent memory or system configuration(/tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory/SKILL.md:3)

View logs

clawguard-rules7ms

1[2026-03-12T20:02:22.516Z] Running @yourclaw/clawguard-rules pattern matcher
2Scanning: /tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory/SKILL.md
3Content length: 3430 chars
4Patterns matched: 1
5  [high] PERM-005: Skill attempts to manipulate persistent memory or system configuration
6✓ Completed in 7ms

gitleaks▸

0 findings1403ms

No findings — all checks passed.

View logs

gitleaks1403ms

1[2026-03-12T20:02:23.919Z] $ gitleaks detect --source /tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory --report-format json --report-path /dev/stdout --no-git
2
3⚠ stderr output:
4○
5    │╲
6    │ ○
7    ○ ░
8    ░    gitleaks
9
10[90m8:02PM[0m [31mFTL[0m [1mReport path is not writable: /dev/stdout[0m [36merror=[0m[31m[1m"open /dev/stdout: no such device or address"[0m[0m
11
12Process exited with code 1
13✓ Completed in 1403ms

semgrep▸

0 findings6675ms

No findings — all checks passed.

View logs

semgrep6675ms

1[2026-03-12T20:02:29.193Z] $ semgrep scan --json --quiet --config auto /tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory
2{"version":"1.155.0","results":[],"errors":[],"paths":{"scanned":["/tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory/SKILL.md","/tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory/_meta.json"]},"time":{"rules":[],"rules_parse_time":1.215329885482788,"profiling_times":{"config_time":1.7561676502227783,"core_time":1.749359369277954,"ignores_time":0.0016102790832519531,"total_time":3.511713743209839},"parsing_time":{"total_time":0.0,"per_file_time":{"mean":0.0,"std_dev":0.0},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_files":[]},"scanning_time":{"total_time":0.02328777313232422,"per_file_time":{"mean":0.004657554626464844,"std_dev":2.0967694727005437e-05},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_files":[]},"matching_time":{"total_time":0.0,"per_file_and_rule_time":{"mean":0.0,"std_dev":0.0},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_rules_on_files":[]},"tainting_time":{"total_time":0.0,"per_def_and_rule_time":{"mean":0.0,"std_dev":0.0},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_rules_on_defs":[]},"fixpoint_timeouts":[],"prefiltering":{"project_level_time":0.0,"file_level_time":0.0,"rules_with_project_prefilters_ratio":0.0,"rules_with_file_prefilters_ratio":0.9693877551020408,"rules_selected_ratio":0.030612244897959183,"rules_matched_ratio":0.030612244897959183},"targets":[],"total_bytes":0,"max_memory_bytes":1106926656},"engine_requested":"OSS","skipped_rules":[],"profiling_results":[]}
3
4Process exited with code 0
5✓ Completed in 6675ms

mcp-scan▸

error

mcp-scan error: Command 'mcp-scan' failed: [33mWARNING: The 'mcp-scan' package has been renamed to 'snyk-agent-scan'. Please update your installation and use 'uvx snyk-agent-scan@latest' instead.

View logs

mcp-scan1755ms

1[2026-03-12T20:02:24.275Z] $ mcp-scan --skills /tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory --json
2
3⚠ stderr output:
4[33mWARNING: The 'mcp-scan' package has been renamed to 'snyk-agent-scan'.
5Please update your installation and use 'uvx snyk-agent-scan@latest' instead.
6
7✗ mcp-scan error: Command 'mcp-scan' failed: [33mWARNING: The 'mcp-scan' package has been renamed to 'snyk-agent-scan'.
8Please update your installation and use 'uvx snyk-agent-scan@latest' instead.
9
10
11Process exited with code 1
12✓ Completed in 1755ms

npm-audit▸

No package.json found — skipping npm audit

View logs

npm-audit0ms

1No package.json found at /tmp/clawguard-scan-KrzQpE/repo/skills/divyvasal/persistent-agent-memory/package.json
2Skipping npm audit.

Scanned: 3/12/2026, 8:02:30 PM