Security audit
Tinker Memory Enhancements
Security checks for vulnerabilities and agentic risk
Overview
This plugin is a disclosed memory-index helper that reads a local OpenClaw memory index and logs optional observer events, with no evidence of hidden exfiltration, destructive behavior, or unsafe automatic actions.
Review the configuration before installing, especially the indexDir path and optional compactionCapture setting. The active v0.1 behavior appears limited, but the plugin is intended to affect memory retrieval behavior and later versions may add write-gating or persistence.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.