Security audit
OpenClaw Universal Capture
Security checks across malware telemetry and agentic risk
Overview
This plugin transparently logs completed OpenClaw conversations to workspace files and optionally enables same-session recall, which matches its stated purpose but needs privacy-aware configuration.
Install only where persistent conversation logging is acceptable. Treat the configured conversation and recall folders as sensitive, keep them out of unintended repository, backup, or sync paths, set agent/surface/channel filters where needed, and define your own retention or deletion process because old Markdown logs are not automatically rotated or removed.
SkillSpector
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
62/62 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.