Sensitive-looking file read is paired with a network send.
Warn
- Code
- suspicious.potential_exfiltration
- Location
- dist/index.js:6528
- Evidence
const store = JSON.parse(fs3.readFileSync(tokenStore.path, "utf8"));
Security audit
Remnic OpenClaw Plugin
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent memory plugin that stores and recalls OpenClaw conversation context, with sensitive behavior largely disclosed and purpose-aligned.
Install this only if you want Remnic to act as your OpenClaw memory system. Expect it to store conversations and derived memories locally, inject relevant memories into future prompts, and send excerpts to whatever model providers or gateway routes you configure. Review modelSource, provider environment variables, memoryDir, connector settings, shared-context settings, and the local HTTP bridge before enabling optional features.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.potential_exfiltration