Security audit
ThunderClaw
Security checks for vulnerabilities and agentic risk
Overview
ThunderClaw is a coherent Thunderbird/OpenClaw bridge that uses explicit pairing and bounded local state to let approved devices request email transformations.
Install only if you want Thunderbird to be able to send selected draft/message content to your configured OpenClaw agents for rewriting, translation, or summarization. Pair only devices you control, review pending pairing requests carefully, and revoke credentials when a Thunderbird installation should no longer have access.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.