Skip to main content

memento

Memento enhances OpenClaw agents with local persistent memory, capturing conversations and extracting structured facts while ensuring privacy.

Install this skill

or
62/100

Security score

The memento skill was audited on Mar 3, 2026 and we found 10 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 30

Access to hidden dotfiles in home directory

SourceSKILL.md
30- path: "~/.engram/conversations.sqlite"
medium line 32

Access to hidden dotfiles in home directory

SourceSKILL.md
32- path: "~/.engram/segments/*.jsonl"
medium line 34

Access to hidden dotfiles in home directory

SourceSKILL.md
34- path: "~/.engram/migration-config.json"
low line 81

Access to hidden dotfiles in home directory

SourceSKILL.md
81mkdir -p ~/.node-llama-cpp/models
low line 82

Access to hidden dotfiles in home directory

SourceSKILL.md
82curl -L -o ~/.node-llama-cpp/models/bge-m3-Q8_0.gguf \
medium line 133

Access to hidden dotfiles in home directory

SourceSKILL.md
133| `~/.engram/conversations.sqlite` | Main database: conversations, facts, embeddings |
medium line 134

Access to hidden dotfiles in home directory

SourceSKILL.md
134| `~/.engram/segments/*.jsonl` | Human-readable conversation backups |
medium line 135

Access to hidden dotfiles in home directory

SourceSKILL.md
135| `~/.engram/migration-config.json` | Optional: migration workspace paths (only for bootstrapping) |
medium line 157

Access to hidden dotfiles in home directory

SourceSKILL.md
1571. Create `~/.engram/migration-config.json` or set `MEMENTO_WORKSPACE_MAIN`:
low line 83

External URL reference

SourceSKILL.md
83"https://huggingface.co/gpustack/bge-m3-GGUF/resolve/main/bge-m3-Q8_0.gguf"
Scanned on Mar 3, 2026
View Security Dashboard
Installation guide →