Knowhere

Security checks across malware telemetry and agentic risk

Overview

Knowhere is a coherent document-ingestion helper, but it relies on an external plugin and can store/search local or URL documents, so install and use it intentionally.

Before installing, verify the external Knowhere plugin package and only ingest documents you are comfortable storing in the current Knowhere scope. Use the cleanup tools intentionally when you no longer want documents to remain searchable.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI04: Agentic Supply Chain Vulnerabilities
Low
What this means

Installing the skill alone does not provide the document tools; using it requires trusting and installing a separate plugin package.

Why it was flagged

The skill depends on an external plugin package that is not included in the provided artifact set. The install step is user-directed and central to the stated purpose, but the plugin provenance should be checked separately.

Skill content
openclaw plugins install @ontos-ai/knowhere-claw
Recommendation

Verify the plugin source, publisher, and repository before installing or enabling it.

#
ASI06: Memory and Context Poisoning
Low
What this means

Documents you ingest may remain searchable in the Knowhere scope until removed or cleared.

Why it was flagged

The skill is designed to store ingested document content for later search and retrieval within a scope. This is expected for the purpose, but private or incorrect content may persist and influence later answers.

Skill content
ingest a local file or URL into the current scope
Recommendation

Ingest only files or URLs you intend to make searchable, and use the remove or clear tools when the stored document state is no longer needed.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

A cleanup action could remove indexed documents from the current Knowhere scope and affect later retrieval.

Why it was flagged

The skill exposes cleanup operations that can modify or delete the plugin's stored document state. This is purpose-aligned, but users should be aware of the impact before clearing a scope.

Skill content
`knowhere_remove_document` and `knowhere_clear_scope` for cleanup
Recommendation

Confirm the target document ID or scope before using remove or clear operations.