A security-focused tool designed to scan workspace files and memory logs for accidentally exposed API keys and sensitive credentials.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install openclaw-memory-audit
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install openclaw-memory-audit using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Openclaw Memory Security Audit?
The Openclaw Memory Security Audit is a specialized utility designed to maintain environment hygiene within your agent's workspace. By performing local, read-only scanning of text files, this skill identifies high-risk patterns such as OpenAI keys, AWS credentials, and JWT tokens. It ensures that sensitive data is never accidentally leaked or persistently stored in memory logs, which is a vital part of managing secure Openclaw Skills.
Beyond simple detection, this skill acts as a security manager by verifying the existence of recurring audit schedules. It leverages the platform's internal cron tools to ensure users maintain a healthy security posture, recommending automated weekly scans if no recurring security checks are detected.
Openclaw Memory Security Audit Use Cases
- Performing a routine security check on an active agent workspace to identify leaked credentials.
- Verifying that no secrets were accidentally logged during a complex debugging session.
- Auditing memory logs before sharing workspace data or committing code to a repository.
- Establishing a weekly automated security scan to maintain long-term environment compliance.
How Openclaw Memory Security Audit Works
- The skill initiates a local scan of all text files in the workspace, intentionally excluding safe configuration files like openclaw.json.
- It executes a Python-based scanning script that matches content against known secret patterns for providers like OpenAI and AWS.
- The tool queries the platform's cron list to verify if a recurring security audit is currently active.
- If no schedule is found, it generates a recommendation for the user to set up a recurring task.
- It provides a structured report of any found secrets along with immediate remediation steps like revocation and redaction.
Openclaw Memory Security Audit Setup
Ensure that python3 is installed in your environment. To perform a manual security scan of your current workspace, execute the following command from your root directory:
python3 skills/openclaw-memory-audit/scripts/scan_secrets.py .
No additional provider credentials are required as the skill performs all scanning locally on your machine.
Openclaw Memory Security Audit Data Schema & Taxonomy
The skill analyzes workspace files and cross-references them with specific credential patterns. It organizes its findings based on the following taxonomy:
| Component | Description |
|---|---|
| Workspace Scoping | Scans all text-based files while ignoring predefined safe-lists. |
| Pattern Library | Includes signatures for OpenAI, Telegram, AWS, and JWT secrets. |
| Cron Metadata | Tracks the existence and timing of scheduled security jobs. |
| Remediation Log | Provides file paths and secret types for identified vulnerabilities. |
Openclaw Memory Security Audit Advanced Features
- Automated detection for a wide array of tokens including OpenAI project keys and n8n JWTs.
- Seamless integration with the OpenClaw cron system for lifecycle-based security monitoring.
- Local-only execution model that ensures no sensitive data is sent to external servers during the audit.
- Intelligent scheduling recommendations to maintain a consistent weekly security cadence for Openclaw Skills.
SKILL.md
Loading
Related Openclaw Skills
LINE Rich Messages
A specialized skill designed to transform text-only LINE bots into interactive assistants using Flex Messages, buttons, and quick replies.
Email Importance & Content Analysis
A sophisticated email triage system that prioritizes messages and detects phishing through technical header verification and deep content analysis.
Shi Guang (拾光) - Catching Light Journaling Skill
A specialized journaling skill for AI agents to preserve raw feelings and unprocessed moments before they are compressed into long-term memory.
AWS Health Monitor
A real-time AWS incident monitoring tool that pushes service health alerts and root cause analysis to your favorite communication channels.
Telegram Rich Messages
A comprehensive framework for implementing interactive Telegram UI elements like inline buttons, reactions, and rich media to streamline bot interactions.
Telegram Sender (tsend)
A zero-config CLI tool for sending files and photos to Telegram with support for multiple bot profiles.
METADATA
Featured*
