Security audit
AgentBill
Security checks for vulnerabilities and agentic risk
Overview
AgentBill is a disclosed OpenClaw cost-control plugin that checks an external service before model and tool calls and blocks calls only according to the configured spend ceiling.
Before installing, confirm you trust AgentBill and the configured baseUrl because the plugin can allow or block model/tool calls and will report usage/accounting metadata to that service. Leave customerFrom as none unless sender or channel attribution is needed, and choose failMode deliberately because the default fail-closed setting can stop calls when AgentBill is unreachable.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.