Openclaw Local Memory

Brain-like local memory plugin for OpenClaw — stores, searches, and injects memories with importance scoring, entity extraction, and automatic consolidation.

This plugin is coherent with its stated purpose and does not phone home, but it will automatically store conversation content to a JSON file in your home directory by default (and its significance detection will treat strings like api_key/password/token as worth saving). Before installing or enabling it, consider: 1) If you have sensitive info (passwords, API keys, PII), disable autoCapture (set autoCapture=false) or increase minSignificanceScore so fewer things are persisted. 2) If you must store memories, use a custom containerTag and restrict file permissions on ~/.openclaw/memory/*.json; back up/encrypt those files if needed. 3) Use local_memory_forget / local_memory_wipe to remove unwanted entries and test wiping behavior. 4) Because the skill can run autonomously and inject memories into prompts, audit what gets injected (profileFrequency, maxMemoryInjections, contextBudget) to avoid leaking sensitive context into model prompts. 5) Source/homepage are absent — you may want to review the included source code (present in the package) or only install from a trusted publisher. If you want tighter guarantees, request encryption-at-rest or opt-in-only capture from the author before using with sensitive conversations.

Type: OpenClaw Skill Name: openclaw-local-memory Version: 0.4.2 The plugin implements a local memory system that intentionally captures and stores sensitive information, including credentials such as API keys, passwords, and tokens, in unencrypted JSON files located in the user's home directory (~/.openclaw/memory/). This behavior is defined by regex patterns in lib/hooks.ts and the storage logic in lib/store.ts. While the intent appears to be providing a 'brain-like' memory for the agent, the specific targeting of secrets for plaintext local storage creates a high-risk vulnerability for credential theft by other local processes, though no evidence of remote exfiltration was found.