Back to plugin

Security audit

openclaw power pack

Security checks for vulnerabilities and agentic risk

Overview

The pack is broadly consistent with an OpenClaw automation installer, but it sets up persistent scheduled agent behavior and encourages storing sensitive credentials in agent-readable files without tight scope controls.

Before installing, review the Python installer and choose the most limited setup mode. Do not add real passwords or tokens to TOOLS.md, and disable or carefully review cron and heartbeat jobs that can run agents or update MEMORY.md automatically.

Static analysis

No suspicious patterns detected.