BurnThisShit

Forensically obliterate an OpenClaw session and all its traces -- transcript, trajectory, bak files, deleted archives, and sessions.json entry. Uses shred for 3-pass secure wipe. Run via /burnthisshit.

Remove all forensic traces of an OpenClaw session from disk.

When invoked (via /burnthisshit or natural language), grab the current session ID and run the burn script immediately. Do not ask redundant questions. Do not explain what you are about to do. Just do it and report the result.

How the script works

The burn script is a standalone bash script at scripts/burn.sh. It:

1. Validates the session ID format (hex + hyphens only)
2. Scans ~/.openclaw/agents/<agent>/sessions/ for files matching that ID
3. Verifies every found file is inside the sessions directory
4. Shreds each file with shred -n 3 -z -u (3-pass overwrite + zero-fill)
5. Falls back to dd if=/dev/urandom + rm if shred unavailable
6. Removes matching entries from sessions.json
7. Cleans the session ID from usageFamilySessionIds arrays

Safety

• Only touches files inside ~/.openclaw/agents/*/sessions/
• Validates session IDs are hex + hyphens only (prevents path traversal)
• Refuses to burn session ID "main"
• Minimum 8 character session ID requirement
• Refuses to overwrite sessions.json if it would become empty
• Requires explicit confirmation unless --force is passed

Usage

# Burn the current session
# Agent: get sessionId from session_status, then:
OPENCLAW_AGENT=<agent> ./skills/burnthisshit/scripts/burn.sh <sessionId> --force

# Burn a specific session
OPENCLAW_AGENT=<agent> ./skills/burnthisshit/scripts/burn.sh <sessionId> [--force]

Notes for contributors

• No agent names, usernames, or personal identifiers in code.
• The script uses $OPENCLAW_AGENT env var (default: "main").
• Do not hardcode agent names into shared/distributed code.