ClawAudit verdict
mem0
mem0-1-0-0
The skill provides a clear description of its purpose and usage, and it does not contain any malicious or deceptive behavior.
โ Flagged for review โ coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis โ not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (3)
References agent memory files
SKILL.md ยท frontmatter ยท MEMORY.md
Popular HTTP library โ network access
SKILL.md ยท code ยท Got
Accesses sensitive environment variables
scripts/mem0-config.js ยท prose ยท downgraded ยท process.env.OPENAI_API_KEY
Permissions & capabilities
No declared permissions โ minimal attack surface.
Is this flag fair?
Thanks โ recorded.