OpenClaw Memory Qdrant

Local semantic memory with Qdrant and Transformers.js. Store, search, and recall conversation context using vector embeddings (fully local, no API keys).

Install this only if you want agent memory. Keep autoCapture off unless you explicitly want conversations saved, avoid storing secrets, and use only in-memory mode or a trusted Qdrant server for sensitive data. Expect the first run to download an embedding model from Hugging Face.

Type: OpenClaw Skill Name: memory-qdrant Version: 1.0.10 The OpenClaw AgentSkills skill bundle 'memory-qdrant' is classified as benign. The code and documentation clearly outline its purpose as a local semantic memory system. It transparently declares network access for downloading an embedding model from Hugging Face and for optional external Qdrant server connections. Crucially, the `index.js` file implements robust input sanitization (`sanitizeInput`) to prevent XSS and other injection attacks, and includes explicit prompt injection defenses (`formatRelevantMemoriesContext`) to instruct the AI agent not to execute commands found in recalled memories. The `CHANGELOG.md` and `test-fixes.js` files demonstrate a proactive approach to security, detailing fixes for previous vulnerabilities such as ReDoS, memory leaks, and error information leakage, indicating responsible development rather than malicious intent. All dependencies are appropriate for the stated functionality, and there is no evidence of data exfiltration, unauthorized execution, or persistence mechanisms.