Session Archive

Automatically saves chat messages to a SQLite database with query and usage statistics support.

Security Scan

The plugin implements what it claims — it archives chat messages and token usage to a local SQLite DB via hooks — and its code, hooks, and configuration are internally consistent with that purpose.

Purpose & Capability

Name/description (session archive) align with the shipped code: plugin registers hooks (before_agent_start and agent_end), writes messages, token usage, and operations metadata into a local SQLite DB. Required permissions/variables are minimal and appropriate for local storage.

Instruction Scope

SKILL.md and README state the plugin is a low-level/automatic plugin that 'activates after install' and uses a default DB path (~/.openclaw/session-archive.db). The runtime code indeed auto-registers hooks and will record all messages and assistant token usage. This is expected behavior for an archive plugin but is privacy-sensitive (it automatically records full conversation content unless user config changes or disables the plugin).

Install Mechanism

There is no remote download/install step in the manifest (no URL extracts). The bundle includes source and compiled JS that uses only local filesystem APIs and better-sqlite3. package.json lists only better-sqlite3 as a dependency. No network endpoints or obfuscated code were found.

Credentials

The skill requests no environment variables, credentials, or config paths beyond a configurable local DB path. Storing data in the user's home directory is coherent with the stated purpose. The plugin exposes a context engine API so other plugins can call recordOperation — this is reasonable for a logging/archival engine but means other plugins could write entries into this DB.

Persistence & Privilege

always:false and the plugin registers itself and hooks normally. It does not alter other plugins' configs or request elevated system privileges. Its persistence is limited to creating and writing a local SQLite file.

Assessment

This skill appears to do exactly what it says: it will automatically save entire conversation contents (including roles, potentially message IDs, media paths, and estimated or real token-usage data) to a local SQLite file (default: ~/.openclaw/session-archive.db). Before installing, consider: 1) privacy — the DB contains raw conversation text and token/cost metadata and is stored unencrypted by default; change the dbPath in openclaw.json or secure/encrypt the file if needed; 2) exposure — other plugins can obtain the plugin's engine and write operation records into this DB; review any other plugins you install; 3) backup/retention — plan disk space and retention/cleanup; 4) provenance — the package source is unknown here; if you require trust guarantees, obtain the plugin from a verified author or audit the included source (dist/*.js and src/*.ts are present). If you do not want automatic archiving of all messages, do not install or disable the plugin after installation.

Session Archive Skill

描述

会话存档插件 - 自动将对话消息保存到 SQLite 数据库。

功能

• 实时保存对话消息
• 支持按会话、日期查询
• 统计模型使用情况

使用方法

此为底层插件，安装后自动生效，无需手动调用。

配置

• 数据库路径：~/.openclaw/session-archive.db
• 可在 openclaw.json 中自定义配置