memory-management

clawhub:memory-management

View source
C
55/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

3

Score

55/100

HIGH 3

Findings (3)

HIGH
Code block labeled "markdown" contains executable content
L281

Code block labeled "markdown" contains executable content

# [Project Name] - SEO Glossary

**Purpose**: Project-specific terminology, brand terms, internal jargon, and abbreviations.

**Last Updated**: [Date]

## Brand Terms

| Term | Full Name | Context |
|...
FIX

Align the tool description with what the code actually does. If the description says one thing but the code does another, update the description to be accurate or fix the code.

FP?

Likely FP if the NLP analyzer misinterpreted technical jargon or the description accurately describes behavior through domain-specific terminology.

HIGH
Self-modifying agent instructions
L492

Detects skills that write or promote content into agent instruction files

Promote top opportunities to CLAUDE.md
FIX

Remove or restrict the skill's ability to modify CLAUDE.md or agent configuration files. Self-modifying agent configurations can be exploited for persistent attacks.

FP?

Likely FP if the skill is a project management tool where updating CLAUDE.md is an intended workflow feature (e.g., appending project notes), though the risk remains.

HIGH
Self-modifying agent instructions
L507

Detects skills that write or promote content into agent instruction files

Promote gap opportunities to CLAUDE.md
FIX

Remove or restrict the skill's ability to modify CLAUDE.md or agent configuration files. Self-modifying agent configurations can be exploited for persistent attacks.

FP?

Likely FP if the skill is a project management tool where updating CLAUDE.md is an intended workflow feature (e.g., appending project notes), though the risk remains.