Security checks across malware telemetry and agentic risk
This plugin is a local project-memory tool whose file access and prompt injection behavior match its stated purpose, with one low-risk wording issue around optional live probes.
Install only if you want local, persistent topic memory. Review any files listed in a topic manifest because their contents can be injected into prompts, avoid putting secrets in topic rooms, and do not add live_probe commands unless you are comfortable approving or supervising their execution.
This plugin reads and writes local topic-room files under ~/openclaw-soul/topics and plugin session state under ~/openclaw-soul/state. It registers a slash command and prompt-build hook. It does not execute shell commands; live probes are listed for the agent to run manually on demand. Sensitive-looking files are blocked from prompt injection, their absolute paths are redacted, and session identifiers are hashed before persistence or logging.
62/62 vendors flagged this plugin as clean.
