Compaction Debugger
Security checks across malware telemetry and agentic risk
Overview
The plugin's code, instructions, and manifest are consistent with a local OpenClaw context-engine that preprocesses and audits session context; it reads/writes local session/log files for diagnostics but does not request external credentials or perform network exfiltration.
This plugin appears to do what it says: preprocess conversation context, delegate formal compaction to the runtime, and keep local diagnostic logs. Before installing, consider: 1) Logs contain message snippets, tool arguments, file paths and possibly secrets — enable debug logging only for testing and review logs before sharing. 2) The plugin writes logs and caches under ~/.openclaw/extensions/compaction-debugger; ensure those files have appropriate filesystem permissions and rotation/cleanup policies. 3) The legacy code will attempt to read local session files (expected for auditing); if you have sensitive transcripts on disk, review the code or disable debug/logging. 4) There are no network calls or credential requests in the package, but if you plan to publish or use in production, run it in a controlled environment and test with non-sensitive sessions first.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
No VirusTotal findings