Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/dist-BsS9bYPg.js:2810
- Evidence
return __require("child_process").execSync("ldd --version", { encoding: "utf8" }).includes("musl");
Security audit
Memory LanceDB
Security checks for vulnerabilities and agentic risk
Overview
This package is a coherent long-term memory plugin that stores and recalls user-approved or configured memories, with the sensitive behavior disclosed and scoped to the memory feature.
Install only if you want OpenClaw to maintain persistent long-term memory. Review the embedding provider, API key or auth profile, database path, remote storage options, autoRecall, and autoCapture settings because stored memories and recall queries may be written to disk or sent to the configured embedding service.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.dangerous_exec