Security audit
PostLake
Security checks for vulnerabilities and agentic risk
Overview
This plugin does what it claims: it connects OpenClaw to PostLake so an agent can upload media and publish or schedule social posts using the user's API key.
Install only if you want OpenClaw agents to be able to act through your PostLake account. Because the plugin can publish public social posts and upload local media that you point it at, review content, target accounts, and timing before approving agent actions.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.