Back to plugin

Security audit

GotoPlan

Security checks for vulnerabilities and agentic risk

Overview

GotoPlan appears to be a disclosed plan-management plugin, but users should notice that it runs plugin code, uses API credentials, can write to task systems, and supports autonomous multi-agent workflows.

This skill looks coherent for plan and task management. Install it only if you trust the publisher and repository, use limited-scope API keys, confirm all write/sync actions, and monitor any cloned AI agents so they do not remain active longer than intended.

Static analysis

No suspicious patterns detected.