OpenClaw Memory Qdrant

Local semantic memory with Qdrant and Transformers.js. Store, search, and recall conversation context using vector embeddings (fully local, no API keys).

Install through ClawHub or the canonical zuiho-kai source only, avoid the inconsistent manual clone URL until corrected, keep autoCapture disabled unless you are comfortable retaining conversation content, use only a trusted Qdrant server, and update/review dependencies before use in sensitive environments.

Type: OpenClaw Skill Name: memory-qdrant Version: 1.0.10 The OpenClaw AgentSkills skill bundle 'memory-qdrant' is classified as benign. The code and documentation clearly outline its purpose as a local semantic memory system. It transparently declares network access for downloading an embedding model from Hugging Face and for optional external Qdrant server connections. Crucially, the `index.js` file implements robust input sanitization (`sanitizeInput`) to prevent XSS and other injection attacks, and includes explicit prompt injection defenses (`formatRelevantMemoriesContext`) to instruct the AI agent not to execute commands found in recalled memories. The `CHANGELOG.md` and `test-fixes.js` files demonstrate a proactive approach to security, detailing fixes for previous vulnerabilities such as ReDoS, memory leaks, and error information leakage, indicating responsible development rather than malicious intent. All dependencies are appropriate for the stated functionality, and there is no evidence of data exfiltration, unauthorized execution, or persistence mechanisms.