session-persistence

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PERSISTENCE]: The skill utilizes a platform-level persistence mechanism via the cron field in SKILL.md frontmatter, scheduled to run persist.py --import every 15 minutes. This is used for its primary purpose of incrementally backing up session data into a local SQLite database.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from session transcript files which could contain adversarial instructions.
  • Ingestion points: The parse_jsonl_file function in persist.py reads JSONL and JSON files from local directories such as ~/.openclaw/sessions and ~/.config/openclaw/sessions.
  • Boundary markers: None. Content is extracted from JSON lines and inserted directly into the SQLite database.
  • Capability inventory: Local file reading, SQLite database read/write/indexing, and YAML state file updates.
  • Sanitization: Basic regex-based sanitization (re.sub(r'[^\w\s]', ' ', query)) is applied to search queries before FTS5 execution, but no sanitization is performed on the ingested content during import.
  • [EXTERNAL_DOWNLOADS]: The documentation in SKILL.md references an external GitHub repository (Martian-Engineering/lossless-claw) as an inspiration for the database schema. This is a neutral reference to a well-known service and does not involve any runtime downloads or execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 07:43 AM