Security audit
Nostr
Security checks for vulnerabilities and agentic risk
Overview
This package is a coherent OpenClaw Nostr direct-message channel plugin, with sensitive key and relay access disclosed and aligned with its purpose.
Before installing, understand that this plugin needs your Nostr private key and will connect to Nostr relays to receive and send encrypted DMs. Prefer environment or secret-store configuration for the key, review the relay list, and use pairing or allowlist mode for tighter access control.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.