Security audit

PLUR1BUS Memory: Make your agent yours

Security checks for vulnerabilities and agentic risk

Overview

This is a complex memory plugin that openly stores and recalls conversation-derived memories and schedules maintenance jobs; I did not find hidden or purpose-mismatched behavior.

Install only if you want automatic long-term memory for OpenClaw. Review autoCapture, autoRecall, featureCronSetup.auto, criticalPush, skillMiner.autoApply, Obsidian write settings, and security.allowModelDestructiveMemoryOps before enabling advanced profiles, especially in shared chats or with sensitive data.

SkillSpector

SkillSpector was not run because this plugin release contains no bundled skills.

Static analysis

Detected: suspicious.dangerous_exec, suspicious.env_credential_access

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: index.js:3544
Evidence: child = spawn(process.execPath, [scriptPath, "--json"], {

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/lib/openclaw-cli.mjs:17
Evidence: const r = spawnSync("openclaw", args, { encoding: "utf8", timeout, ...(options.env ? { env: options.env } : {}) });

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: index.js:655
Evidence: const v = process.env[envVar];