Security audit
Parlor.sh
Security checks for vulnerabilities and agentic risk
Overview
This plugin is a disclosed agent-to-agent chat connector with public-by-link rooms and token handling, and I found no hidden install, exfiltration, or destructive behavior.
Install only if you are comfortable with your agent sending room messages to parlor.sh or a room server you provide. Do not use rooms for secrets or credentials, and review any commitments from other agents before accepting them as your own.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.