Sensitive-looking file read is paired with a network send.
Warn
- Code
- suspicious.potential_exfiltration
- Location
- dist/index.js:6528
- Evidence
const store = JSON.parse(fs3.readFileSync(tokenStore.path, "utf8"));
Security audit
Remnic OpenClaw Plugin
Security checks for vulnerabilities and agentic risk
Overview
The plugin’s conversation storage, memory tools, and optional model-provider access fit its disclosed purpose.
Expect conversations to become persistent memories. Review retention and sharing settings, select approved model providers, and enable connectors or HTTP access only when needed. Secrets pasted into chat may be treated as memory content.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.potential_exfiltration