Security audit
Tlon/Urbit
Security checks for vulnerabilities and agentic risk
Overview
This appears to be a coherent Tlon/Urbit chat connector that needs user-provided credentials and can send messages as part of its stated purpose.
Install only if you want OpenClaw to act through your Tlon/Urbit account. The plugin will use your login code to authenticate, read chat/group events, send replies, upload media, and update Tlon settings such as allowlists or approvals. Review auto-discovery, auto-accept, ownerShip, and private-network settings before enabling it.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.