Loading npm security reports…
OpenClaw collector plugin for xmem — graph-based long-term memory for AI agents. Deep workspace capture (all relevant file types, 4 levels deep, periodic re-scan every 2h). Multi-agent aware with per-agent Space/Key routing. Triple-ingest (artifacts + att
LPM treats this as warn-only first-party agent extension lifecycle risk. Installation changes the OpenClaw allowlists to enable this package's memtap tool. With an API key configured, runtime hooks automatically collect workspace and conversation content and send it to xmem.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage ships non-JavaScript build or shell helper files.
scripts/post-install.shView on unpkgThe postinstall hook silently edits the user's OpenClaw configuration and adds memtap to tool and plugin allowlists.
scripts/post-install.shView on unpkg · L25Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L41Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L41The postinstall hook silently edits the user's OpenClaw configuration and adds memtap to tool and plugin allowlists.
scripts/post-install.shView on unpkg · L25Package ships non-JavaScript build or shell helper files.
scripts/post-install.shView on unpkg