Security audit
Agent Collaboration OS
Security checks for vulnerabilities and agentic risk
Overview
This plugin is a disclosed OpenClaw collaboration backend client; it can change shared project data, but those capabilities match its stated purpose and are not hidden.
Install only if you intend to connect this agent to the zhuzeyang/OpenClaw collaboration backend or a configured equivalent. Treat userToken and agentKey as sensitive, review broad task/project invocations before allowing changes, and be aware that approved tool calls can persistently modify remote project files, memories, membership, agent records, inbox acknowledgments, and orchestration state.
Static analysis
No suspicious patterns detected.
