Security audit
Pinned Context Blocks
Security checks for vulnerabilities and agentic risk
Overview
This plugin stores user-created context snippets and injects them into later OpenClaw prompts, and that behavior is disclosed, scoped, and purpose-aligned.
Review that you are comfortable with a plugin adding your saved text to future prompts. Keep group support disabled unless you intend to use it, configure group admin allowlists carefully, and avoid saving passwords, API keys, or private material in shared group blocks.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.