Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/src/cli.js:216
- Evidence
exec(cmd, () => { });
Security audit
XMemo for OpenClaw
Security checks for vulnerabilities and agentic risk
Overview
This package is a disclosed XMemo cloud-memory plugin for OpenClaw, with expected credential, network, local cache, and memory-management behavior for that purpose.
Install only if you want OpenClaw to use XMemo as a cloud-backed long-term memory service. Expect conversation-derived memories and explicit memory tool writes to be sent to the configured XMemo service, with local cache/outbox files stored under the user data directory. Prefer environment SecretRefs for production credentials, keep auto-capture disabled unless you explicitly want it, and use only a trusted XMemo base URL for browser login.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.dangerous_exec