Lily Memory 5.0.0

• Verdict: Pass
• Confidence: Medium
• Analyzed: Feb 17, 2026, 8:49 AM
• Findings: 0
• Version: 1.0.0

Overview

The plugin's code, requirements, and runtime instructions are coherent with a persistent memory plugin: it needs node+sqlite3, stores conversation-derived facts in a local SQLite DB, and optionally calls a local Ollama embedding service — there are no unexplained credentials or external download steps, but provenance is lacking and it will persist potentially sensitive chat data.

This plugin appears to do what it says: it persistently stores extracted facts from conversations in a local SQLite DB and optionally uses an Ollama embedding service. Before installing: 1) Note provenance is unknown (no homepage/source repository) — inspect the included source if you can. 2) Understand it will persist conversation content to the configured dbPath (default ~/.openclaw/memory/decisions.db); sensitive data can be captured — consider disabling autoCapture, lowering maxCapturePerTurn, or setting dbPath to an encrypted/controlled location. 3) The Ollama endpoint is configurable; keep it pointed at a trusted localhost instance if you enable vector search. 4) Review and test in a sandboxed profile first (or run with autoCapture=false) if you have any privacy or security concerns. 5) The manifest claims 'instruction-only' yet full source files are bundled — if you expected only instructions, be aware code will run as part of the plugin.