File appears to expose a hardcoded API secret or token.
Critical
- Code
- suspicious.exposed_secret_literal
- Location
- test/adapter.test.ts:117
- Evidence
expect((init as RequestInit).headers).toMatchObject({ authorization: '[REDACTED]' })
Security audit
Memoria
Security checks across malware telemetry and agentic risk
Overview
This plugin is a disclosed local memory connector that automatically recalls and stores conversation context through a local Memoria daemon.
Install this only if you want OpenClaw conversations to be automatically sent to your local Memoria service for later recall. Review the Memoria daemon's storage, deletion, and retention controls, and disable autoCapture or autoRecall in plugin config for sessions where prompts, outputs, secrets, or personal data should not be remembered.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
65/65 vendors flagged this plugin as clean.
Static analysis
Detected: suspicious.exposed_secret_literal