Openclaw Memory Lancedb 2026.5.12 Beta.6.Tgz

PassAudited by VirusTotal on May 10, 2026.

Findings (1)

Package: @openclaw/memory-lancedb (npm) Version: 2026.5.7 Description: OpenClaw LanceDB-backed long-term memory plugin with auto-recall/capture The package provides a LanceDB-backed long-term memory plugin for the OpenClaw ecosystem. The codebase focuses on vector embedding storage and retrieval, tool registration, and lifecycle management. It correctly utilizes Node.js APIs for file system and environment variable access (e.g., resolving database paths and reading API keys/storage credentials via `process.env`). The implementation includes robust configuration validation and incorporates several defensive coding practices, such as sanitizing recalled memory content (`escapeMemoryForPrompt`) and checking user input for potential prompt injection patterns (`looksLikePromptInjection`) before auto-capturing or using data in prompts. All functionality aligns perfectly with the stated purpose of providing a vector memory backend. No malicious or suspicious activities were detected.