Security audit
OpenClaw Learning Memory
Security checks for vulnerabilities and agentic risk
Overview
This plugin transparently adds configured local memory files to agent prompts, but users should avoid putting secrets in those files because they may be included in group or channel sessions.
Install only if you want MEMORY.md, USER.md, and recent memory notes included in prompts for all enabled agent sessions, including groups/channels. Keep secrets, private credentials, and sensitive personal data out of those files, and narrow the configured files/recentDays if the plugin is used in shared contexts.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.