openclaw-mem
Warn
Audited by Snyk on May 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). scripts/setup.sh invokes "pip3 install openclaw-mem" and then runs the installed CLI (openclaw-mem init), so remote package code (e.g. the repository at https://github.com/kjaylee/openclaw-mem) would be fetched at runtime and executed, creating a direct external-code execution dependency.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata