Back to plugin

Security audit

OBS Controller

Security checks for vulnerabilities and agentic risk

Overview

This is a purpose-built OBS controller with powerful live-production controls, but the reviewed artifacts disclose that purpose and do not show hidden data access or behavior outside OBS control.

Install this only for agents you trust to operate OBS. Keep the WebSocket host local where possible, use a strong OBS WebSocket password, allowlist only the OBS tools you actually need, and require human confirmation for starting or stopping streams/recordings, triggering hotkeys, changing visible sources, and making live scene or transition changes.

Static analysis

No suspicious patterns detected.