Back to plugin

Security audit

Qwen 3.6 Key Fix

Security checks for vulnerabilities and agentic risk

Overview

This plugin appears to do only the narrow key-cleaning workaround it claims to do, without asking for credentials or unrelated access.

This looks internally consistent: it is a small plugin that only intercepts cron tool calls and cleans malformed JSON keys. The main practical caveat is not maliciousness but behavior: if two keys become the same after cleaning, one value may overwrite the other, and it may strip intentional trailing punctuation from nested cron payload keys. If you rely on unusual key names inside cron payloads, test it first.

Static analysis

No suspicious patterns detected.