Security audit
OpenClaw Raw Memory System
Security checks for vulnerabilities and agentic risk
Overview
This plugin does what it says, but it continuously copies complete agent conversations into searchable local files with limited privacy, retention, and access-control safeguards.
Install only if you intentionally want complete local archives of OpenClaw agent conversations. Treat the backup directory as sensitive, restrict filesystem access, avoid storing secrets in conversations, configure a retention policy, use cleanup carefully, and limit which agents or users can run the raw search tool.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.