Session Archive

Automatically saves conversation messages to a SQLite database with query and model usage statistics functionality.

Security Scan

The plugin's code, behavior, and configuration align with its stated purpose (saving conversations to a local SQLite DB); it does not request unrelated credentials or perform network/execution operations.

Purpose & Capability

Name/description match the implementation: the plugin registers a context engine that ingests messages and writes them into a local SQLite DB. The declared config (dbPath) and default (~/.openclaw/session-archive.db) are consistent with the code. The operations/token usage tables are for logging and analytics and align with the README.

Instruction Scope

SKILL.md says the plugin runs automatically and stores messages to SQLite; the runtime code shows only ingestion, query, and token-estimation functions. It does not read unrelated system files, contact external endpoints, or execute shell commands. It records provided operation metadata but does not itself perform 'exec' or other system actions.

Install Mechanism

There is no external install URL; the package includes source and dist JS. package.json depends only on better-sqlite3 (a native SQLite binding). The presence of a large package-lock is notable but not evidence of malicious downloads; better-sqlite3 may require native build tools on install/runtime depending on environment.

Credentials

The plugin requests no environment variables or credentials. Its sole filesystem interaction is creating/using a DB under the user's home (~/.openclaw). That is proportionate to its function of archiving conversations.

Persistence & Privilege

always is false and the plugin registers itself as a context engine (expected for this kind of plugin). It does not attempt to modify other plugins' configuration or system settings beyond registering itself; its DB is per-user and written to the home directory.

Assessment

This plugin appears to do what it claims: archive all conversation messages into a local SQLite file (default: ~/.openclaw/session-archive.db). Before installing, consider: 1) the database will contain full conversation content (sensitive) — restrict filesystem permissions, and back up or encrypt the DB if needed; 2) better-sqlite3 is a native dependency that may require build tools on some systems — ensure your environment can install it; 3) review/confirm the dbPath in openclaw.json so data isn't written to an unexpected location; 4) if you need stronger guarantees, inspect the included source files (they are present) and confirm no network calls were added in later versions. Overall the package is internally consistent with its stated purpose.

Session Archive Skill

描述

会话存档插件 - 自动将对话消息保存到 SQLite 数据库。

功能

• 实时保存对话消息
• 支持按会话、日期查询
• 统计模型使用情况

使用方法

此为底层插件，安装后自动生效，无需手动调用。

配置

• 数据库路径：~/.openclaw/session-archive.db
• 可在 openclaw.json 中自定义配置