Sensitive-looking file read is paired with a network send.
Warn
- Code
- suspicious.potential_exfiltration
- Location
- dist/index.js:6646
- Evidence
const store = JSON.parse(fs3.readFileSync(tokenStore.path, "utf8"));
Security audit
Remnic OpenClaw Plugin
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed OpenClaw memory plugin that stores and recalls conversation memory locally, with optional provider routing and optional local HTTP/cron features that are mostly off by default.
Install only if you want Remnic to act as your OpenClaw memory layer. Expect it to persist conversation-derived memories locally and to send excerpts to whatever gateway or provider models you configure; avoid pasting secrets into chat and review optional settings before enabling HTTP access, cron jobs, direct provider API keys, active-recall transcript persistence, or shared-memory promotion.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
Detected: suspicious.potential_exfiltration