Dalong Session Logs

AdvisoryAudited by Static analysis on May 6, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

When invoked, the agent may run local search commands over session files to answer questions about prior conversations.

Why it was flagged

The skill provides local shell pipelines using jq and ripgrep to process session log files. This is expected and read-only for the stated purpose, but it can operate across many local logs.

Skill content
SESSION_DIR="${OPENCLAW_STATE_DIR:-$HOME/.openclaw}/agents/$AGENT_ID/sessions" ... rg -l "phrase" "$SESSION_DIR"/*.jsonl
Recommendation

Ask for targeted searches by date, session, or keyword when possible, and review any broad all-session search before relying on the results.

What this means

Sensitive details from older chats could be brought into the current conversation when the user asks the agent to search history.

Why it was flagged

The skill intentionally retrieves persisted conversation history, including user and assistant messages, tool results, costs, and tool calls. This is purpose-aligned, but the content may be sensitive or contain stale instructions.

Skill content
Search your complete conversation history stored in session JSONL files.
Recommendation

Install only if you are comfortable with the agent reading local session transcripts; treat retrieved log text as historical data, not as instructions to follow.