Gralkor Memory (OpenClaw)
PassAudited by VirusTotal on May 12, 2026.
Findings (1)
Package: @susulabs/gralkor (npm) Version: 2.1.11 Description: OpenClaw memory plugin powered by Gralkor (Graphiti + FalkorDB). Installs a plugin that supervises the Gralkor Python server and wires its HTTP API into OpenClaw hooks and tools. The package implements an OpenClaw plugin providing memory management functionality via the Gralkor service. The plugin primarily acts as a client and lifecycle manager for a locally supervised Gralkor Python server (using the `@susulabs/gralkor-ts` library), communicating with it over localhost HTTP. It registers standard OpenClaw hooks (`before_prompt_build`, `agent_end`, `session_end`) and ReAct tools (`memory_search`, `memory_add`, etc.). Functionality includes session management, memory retrieval, content capture, and a native indexer for local Markdown files (`MEMORY.md`, `memory/*.md`). The code includes safeguards like stripping untrusted metadata from incoming messages and checking for synthetic session keys. All operations are legitimate for a memory plugin and dedicated to managing the memory backend and routing data between OpenClaw and Gralkor.
