Security audit
OpenClaw Raw Memory System
Security checks across malware telemetry and agentic risk
Overview
This plugin does what it says, but it continuously copies complete agent conversations into searchable local files with limited privacy, retention, and access-control safeguards.
Install only if you intentionally want complete local archives of OpenClaw agent conversations. Treat the backup directory as sensitive, restrict filesystem access, avoid storing secrets in conversations, configure a retention policy, use cleanup carefully, and limit which agents or users can run the raw search tool.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
64/64 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.