Security audit
ebb-ai — carbon-aware deferral
Security checks for vulnerabilities and agentic risk
Overview
The plugin mostly matches its carbon-aware scheduling purpose, but it needs review because broad automatic scheduling and background execution can later send full task results outside OpenClaw.
Review this before installing if you handle sensitive prompts or outputs. Use queue delivery for sensitive tasks, verify any webhook URL, Telegram target, or file path before enabling it, and consider setting disableStartupDispatch if you do not want queued tasks to run automatically in the background.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.