Security audit
Honcho Memory
Security checks across malware telemetry and agentic risk
Overview
This appears to be a real Honcho memory plugin, but it can automatically enable conversation capture and persist/search conversation history across sessions.
Review this carefully before installing if your OpenClaw conversations include sensitive work, client data, private chats, or credentials. Confirm the Honcho workspace, base URL, API key handling, allowConversationAccess setting, and whether cross-session search should stay enabled.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
62/62 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.