Security audit

PLUR1BUS Memory: Make your agent yours

Security checks for vulnerabilities and agentic risk

Overview

This memory plugin needs review because installation can add background jobs and overwrite customized scheduled instructions more broadly than its documentation promises.

Back up and inspect existing scheduled jobs before installing. To avoid automatic provisioning, suppress npm lifecycle scripts and disable featureCronSetup.auto before loading; omitted feature switches are insufficient. Review provider access to conversations, and use skillMiner.autoApply="off" if you enable mining but want manual approval.

SkillSpector

SkillSpector was not run because this plugin release contains no bundled skills.

Static analysis

Detected: suspicious.dangerous_exec, suspicious.env_credential_access

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: index.js:3611
Evidence: child = spawn(process.execPath, [scriptPath, "--json"], {

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/lib/openclaw-cli.mjs:17
Evidence: const r = spawnSync("openclaw", args, { encoding: "utf8", timeout, ...(options.env ? { env: options.env } : {}) });

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: index.js:701
Evidence: const v = process.env[envVar];