LanceDB Hybrid Search Memory Plugin

• Analyzed: May 12, 2026, 3:41 AM
• Findings: 1
• Version: 1.2.1
• Hash: e3e473ccec1050b7d5a70e77af9acf45588dd472470f8726519023c12df9ba4e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate implementation of a LanceDB-backed long-term memory plugin for OpenClaw, adding hybrid (vector + BM25) search capabilities. The code in `plugin/index.ts` and `plugin/config.ts` includes proactive security measures, such as prompt injection detection patterns, HTML escaping for injected context, and UUID validation to prevent injection in database queries. It follows standard practices for handling API keys via environment variables and provides clear documentation for its intended purpose.