HTTPS certificate verification is disabled.
Warn
- Code
- suspicious.insecure_tls_verification
- Location
- dist/postgres.js:17
- Evidence
return { rejectUnauthorized: false };
Security audit
AnchorClaw
Security checks for vulnerabilities and agentic risk
Overview
AnchorClaw is a disclosed Postgres-backed memory plugin whose persistent storage, prompt hooks, and maintenance jobs match its stated memory purpose.
Install only if you want AnchorClaw to become the active long-term memory backend. Use a dedicated PostgreSQL database, review the openclaw.json changes from setup/update, decide whether background maintenance and semantic providers should be enabled, and understand that legacy import can archive or stub existing memory files when applied.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.insecure_tls_verification