How do I install the Openclaw Memory Audit skill?

Run npx skillmds@latest add modbender/openclaw-memory-audit in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Openclaw Memory Audit safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: executes scripts, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Openclaw Memory Audit?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Openclaw Memory Audit free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Openclaw Memory Audit?

modbender (@modbender) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Openclaw Memory Audit by modbender — Agent Skill

Name: Openclaw Memory Audit
Rating: 4.2 (5 reviews)
Author: modbender

Openclaw Memory Audit

Scan the agent workspace and memory logs for leaked API keys, tokens, or sensitive credentials. Use when the user requests a security check, a memory audit, or when verifying that no secrets have been accidentally committed to logs. Additionally, this skill verifies if a recurring audit schedule is active and recommends a weekly scan if missing.

modbender Updated Sep 9, 2026 12 repo stars

File contents

Memory Security Audit

This skill provides a specialized tool to scan the workspace and memory log files for accidentally exposed secrets and ensures a healthy audit routine.

Security / Scope (Important)

This skill performs local, read-only scanning of files to detect secret-looking patterns.
It does not require (and must not include) any provider credentials.
Scheduling checks use OpenClaw's cron tool (listing/recommending a job). It does not edit configs automatically.

Audit Workflow

1. Secret Scanning

Run the scanning script to check all text files in the workspace (excluding a small set of known safe/noisy files like openclaw.json).

# from your OpenClaw workspace root:
python3 skills/openclaw-memory-audit/scripts/scan_secrets.py .

# or, if you are inside the skill folder:
python3 scripts/scan_secrets.py ..

2. Schedule Verification

Check the active cron jobs to ensure a recurring security audit is configured.

Call cron.list() and look for jobs related to "memory security" or "audit".
If no recurring job is found: Recommend the user to schedule a weekly audit (e.g., every Monday at 09:00).
If found: Confirm the next run time to the user.

What it checks for:

OpenAI API Keys (including project keys)
Telegram Bot Tokens
JWT Tokens (n8n, etc.)
Generic Alphanumeric Secrets (32+ characters)
AWS Credentials

Recommendations if secrets are found:

Revoke the secret immediately at the provider's dashboard.
Delete or redact the file containing the secret.
Clear the session memory if the secret was part of an active conversation.

---name: openclaw-memory-auditdescription: Scan the agent workspace and memory logs for leaked API keys, tokens, or sensitive credentials. Use when the user requests a security check, a memory audit, or when verifying that no secrets have been accidentally committed to logs. Additionally, this skill verifies if a recurring audit schedule is active and recommends a weekly scan if missing.--- # Memory Security Audit This skill provides a specialized tool to scan the workspace and memory log files for accidentally exposed secrets and ensures a healthy audit routine. ## Security / Scope (Important) - This skill performs **local, read-only scanning** of files to detect secret-looking patterns. - It **does not require** (and must not include) any provider credentials. - Scheduling checks use OpenClaw's **cron tool** (listing/recommending a job). It does not edit configs automatically. ## Audit Workflow ### 1. Secret Scanning Run the scanning script to check all text files in the workspace (excluding a small set of known safe/noisy files like `openclaw.json`). ```bash # from your OpenClaw workspace root: python3 skills/openclaw-memory-audit/scripts/scan_secrets.py . # or, if you are inside the skill folder: python3 scripts/scan_secrets.py .. ``` ### 2. Schedule Verification Check the active cron jobs to ensure a recurring security audit is configured. - Call `cron.list()` and look for jobs related to "memory security" or "audit". - **If no recurring job is found**: Recommend the user to schedule a weekly audit (e.g., every Monday at 09:00). - **If found**: Confirm the next run time to the user. ### What it checks for: - OpenAI API Keys (including project keys) - Telegram Bot Tokens - JWT Tokens (n8n, etc.) - Generic Alphanumeric Secrets (32+ characters) - AWS Credentials ### Recommendations if secrets are found: 1. **Revoke the secret** immediately at the provider's dashboard. 2. **Delete or redact the file** containing the secret. 3. **Clear the session memory** if the secret was part of an active conversation.

Frequently asked questions