Security audit
GotoPlan
Security checks for vulnerabilities and agentic risk
Overview
GotoPlan appears to be a disclosed plan-management plugin, but users should notice that it runs plugin code, uses API credentials, can write to task systems, and supports autonomous multi-agent workflows.
This skill looks coherent for plan and task management. Install it only if you trust the publisher and repository, use limited-scope API keys, confirm all write/sync actions, and monitor any cloned AI agents so they do not remain active longer than intended.
Static analysis
No suspicious patterns detected.
