@mapick/openclaw-plugin

Local-first privacy, cost, and skill-hygiene for OpenClaw.

Status: V1.0 in development — scaffold only, not yet published to npm or ClawHub.

What it does

Mapick OpenClaw Plugin delivers three local-first capabilities through OpenClaw's plugin hook system. V1.0 is local-first: conversation content never leaves your device. Only a one-time identity bootstrap and occasional kill-switch verifications touch the network.

Core capabilities (V1.0)

• Tool-call redaction — Scans tool inputs and outputs for credentials and personal data (API keys, tokens, connection strings, email, credit cards, private keys, and more). Matches are replaced with [REDACTED_n] placeholders before any tool boundary is crossed. Linear-time regex (RE2) prevents ReDoS.
• Cost diary — Records LLM token usage locally, attributed by active Skill. Stored in a SQLCipher-encrypted libSQL database at ~/.mapick/plugin/data.db. Query via openclaw mapick cost. Never uploaded.
• Zombie skill decay — Tracks Skill usage locally. Soft-suppresses long-unused Skills via appendSystemContext so the model stops proposing them. Reverse with openclaw mapick revive <skill>. Never uploaded.

Infrastructure

• Identity layer using OS Keychain with argon2id + AES-256-GCM fallback (no derivation from device fingerprint).
• Kill Switch response for emergency remote disablement of plugin-to-backend communication.
• First-install consent flow with a versioned policy hash; any material change to the privacy policy triggers re-consent.

Requirements

• OpenClaw 2026.4.22 or newer
• Node.js 22 or 24 (LTS); Node 25 and 26 are not supported.
• macOS or Linux. Windows is supported only via WSL2.

Install

Not yet published. Installation instructions will appear here once V1.0 ships to npm and ClawHub.

Users on pnpm 10 or newer will need to approve native module builds (keytar, argon2, @libsql/client) via pnpm approve-builds. The fallback credential path activates automatically when the OS keychain is unavailable.

Privacy

See docs/privacy.md for the full privacy policy. Every consent record stores a SHA-256 hash of the canonicalized policy document, so any material policy change triggers a re-consent prompt on next launch.

Related

• OpenClaw — the AI CLI platform this plugin runs on
• mapick-skill — cross-tool SKILL.md for non-OpenClaw environments (Claude Code, Codex, Gemini CLI)

License

MIT — see LICENSE.