Security audit
Honcho Memory
Security checks for vulnerabilities and agentic risk
Overview
This appears to be a real Honcho memory plugin, but it can automatically enable conversation capture and persist/search conversation history across sessions.
Review this carefully before installing if your OpenClaw conversations include sensitive work, client data, private chats, or credentials. Confirm the Honcho workspace, base URL, API key handling, allowConversationAccess setting, and whether cross-session search should stay enabled.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.