Security audit
Security checks for vulnerabilities and agentic risk
Overview
This package is a disclosed Facebook Page Messenger channel plugin that uses the expected Meta credentials, webhook handling, and reply-sending behavior for its stated purpose.
Install only if you intend to connect an OpenClaw assistant to a Facebook Page inbox. Treat the Page access token, app secret, verify token, sender IDs, message content, and any attachments as sensitive; keep the default pairing or allowlist mode until you are ready for public users and have appropriate privacy, retention, rate-limit, and tool-permission controls in the OpenClaw host.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.