Security audit
VITNA
Security checks for vulnerabilities and agentic risk
Overview
This plugin is a disclosed security gate that checks OpenClaw tool calls through VITNA before allowing, blocking, or holding them.
Install this only if you want VITNA to review OpenClaw tool calls, because tool call arguments may be sent to the configured VITNA endpoint and VITNA can block or hold calls. Configure ownerId, apiKey, policy, and hook timeout deliberately; without a policy, named tools are broadly allowed except for VITNA detector decisions.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.