memU is an AI agent skill, created by NevaMind-AI and published at NevaMind-AI/memU. ClawSecure audited memU across 50 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (Critical). The 35 findings concentrate in Malicious Code, Supply Chain Attack and Command Injection, including Content is downloaded from the network and subsequently… and Suspicious Pattern: require("node:child_process"). 21 were rated high or critical severity.
Is memU safe?
ClawSecure audited memU and assigned a security score of 0/100 (Critical), identifying 35 findings across Malicious Code and Supply Chain Attack. Review the findings below before installing.
What did ClawSecure find in memU?
ClawSecure identified 35 findings in memU, concentrated in Malicious Code, Supply Chain Attack and Command Injection. 21 were rated high or critical severity. The most severe include Content is downloaded from the network and subsequently… and Suspicious Pattern: require("node:child_process").
How was memU audited?
ClawSecure ran memU through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 50 files from NevaMind-AI/memU.
What does a score of 0 mean?
ClawSecure assigned memU a security score of 0/100, placing it in the Critical range. This is driven by 35 findings led by Malicious Code that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for memU
ClawSecure detected 35 security findings in memU, spanning Malicious Code, Supply Chain Attack, Command Injection and Code Injection.
- critical · Content is downloaded from the network and subsequently…. Command Injection finding detected in
INSTALL-LATEST.md:47. - critical · Suspicious Pattern: require("node:child_process"). Command Injection finding detected in
npm/bin/memu.js:12. - critical · Suspicious Pattern: spawnSync(. Command Injection finding detected in
npm/bin/memu.js:17. - critical · Suspicious Pattern: spawnSync(. Command Injection finding detected in
npm/bin/memu.js:22. - critical · Suspicious Pattern: spawnSync(. Command Injection finding detected in
npm/bin/memu.js:40. - high · Pipeline downloads data from the network and executes it:…. Data Exfiltration finding detected in
CONTRIBUTING.md:7. - high · Pipeline downloads data from the network and executes it:…. Data Exfiltration finding detected in
INSTALL-LATEST.md:1. - high · Pipeline downloads data from the network and executes it:…. Data Exfiltration finding detected in
npm/README.md:1. - high · Attempts to access sensitive file: MEMORY.md. Malicious Code finding detected in
CHANGELOG.md. - high · Attempts to access sensitive file: SOUL.md. Malicious Code finding detected in
README.md. - high · Attempts to access sensitive file: MEMORY.md. Malicious Code finding detected in
README.md. - high · Attempts to access sensitive file: MEMORY.md. Malicious Code finding detected in
0004-workspace-memorize-and-memory-file-system.md.
Showing the 12 highest-severity of 35 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for memU
Audit external network connections
Harden command execution
Eliminate dynamic code execution
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on October 16, 2026. memU is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.