Back to plugin

Security audit

Nowledge Mem

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed memory plugin that intentionally stores, searches, and deletes OpenClaw memories and conversations, with privacy-sensitive behavior that matches its purpose.

Install only if you want OpenClaw conversations and useful decisions to be retained in Nowledge Mem. Review whether you want local or remote mode, whether sessionDigest should stay enabled, and how to use #nmem-skip, captureExclude, and forget/delete controls for sensitive sessions.

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Missing User Warnings

High
Category
Not specified by scanner
Confidence
97% confidence
Finding

The skill explicitly directs the agent to save information proactively whenever a conversation produces a durable fact, preference, decision, plan, or context, while also stating that storage spans multiple sources and tools. Without an explicit user warning, opt-in, or consent boundary, this can lead to silent retention and cross-context aggregation of sensitive personal data, creating significant privacy and data-governance risk.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The activation criteria are very broad and include common conversational patterns like asking what was discussed before, reminders, plans, or prior work. This creates a real risk of over-triggering the skill in ordinary conversations, which can cause unnecessary retrieval or persistence of sensitive memory data and expand the privacy exposure surface beyond what the user reasonably expects.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.