session-persistence
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PERSISTENCE]: The skill utilizes a platform-level persistence mechanism via the
cronfield inSKILL.mdfrontmatter, scheduled to runpersist.py --importevery 15 minutes. This is used for its primary purpose of incrementally backing up session data into a local SQLite database. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from session transcript files which could contain adversarial instructions.
- Ingestion points: The
parse_jsonl_filefunction inpersist.pyreads JSONL and JSON files from local directories such as~/.openclaw/sessionsand~/.config/openclaw/sessions. - Boundary markers: None. Content is extracted from JSON lines and inserted directly into the SQLite database.
- Capability inventory: Local file reading, SQLite database read/write/indexing, and YAML state file updates.
- Sanitization: Basic regex-based sanitization (
re.sub(r'[^\w\s]', ' ', query)) is applied to search queries before FTS5 execution, but no sanitization is performed on the ingested content during import. - [EXTERNAL_DOWNLOADS]: The documentation in
SKILL.mdreferences an external GitHub repository (Martian-Engineering/lossless-claw) as an inspiration for the database schema. This is a neutral reference to a well-known service and does not involve any runtime downloads or execution.
Audit Metadata