openclaw/memory-poison-auditor

Memory Poison Auditor

memory-poison-auditor checks whether OpenClaw memory files have been contaminated by hidden instructions, brand steering, injected operational policies, or suspicious recommendation bias written through prior conversations.

What It Checks

• Prompt-injection style instructions inside memory.
• "Always recommend X" or "never mention Y" style brand steering.
• Abnormal brand repetition and preference shaping.
• Suspicious authority claims like fake approvals or fake user intent.
• Low-signal blocks that act like covert policy rather than factual memory.
• Optional AI review for borderline suspicious blocks.

Commands

Audit Default Memory Roots

python3 {baseDir}/scripts/audit_memory.py scan
python3 {baseDir}/scripts/audit_memory.py --format json scan

Audit a Specific Path

python3 {baseDir}/scripts/audit_memory.py scan --path /root/clawd/MEMORY.md
python3 {baseDir}/scripts/audit_memory.py scan --path /root/clawd/memory

Optional AI Review

python3 {baseDir}/scripts/audit_memory.py scan --with-ai
python3 {baseDir}/scripts/audit_memory.py scan --path /root/clawd/memory/2026-03-15.md --with-ai

One-Click Cleaning

python3 {baseDir}/scripts/audit_memory.py clean --path /root/clawd/MEMORY.md --apply
python3 {baseDir}/scripts/audit_memory.py clean --path /root/clawd/memory --apply

Cleaning creates backups before rewriting suspicious blocks.

Output

Each audit returns:

• PASS: no meaningful poisoning signals
• WARN: suspicious memory blocks detected
• BLOCK: memory likely contaminated and should be reviewed/cleaned

Reports and backups are written to:

/root/clawd/output/memory-poison-auditor/reports/
/root/clawd/output/memory-poison-auditor/backups/

Operational Guidance

• Use this before trusting long-term memory in important planning or recommendations.
• WARN means review before relying on that memory block.
• BLOCK means clean or quarantine the memory before reuse.
• AI review is optional and intended only for ambiguous cases.