Security audit
Obsidian Export
Security checks for vulnerabilities and agentic risk
Overview
This plugin does exactly what it advertises: it locally exports OpenClaw session transcripts to an Obsidian folder, with sensitive plaintext persistence clearly disclosed.
Install only if you are comfortable with every OpenClaw session being saved in plaintext to the configured Obsidian directory. Avoid putting secrets in sessions, choose an output folder you control, and remember that the on-demand tool can export older local sessions when given their session identifiers.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.