Security audit
E-Claw OpenClaw Channel
Security checks across malware telemetry and agentic risk
Overview
The plugin mostly matches its E-Claw channel purpose, but it has Review-worthy handling of secrets in agent context and automatic remote account changes that users should inspect before installing.
Before installing, confirm you are comfortable giving this plugin E-Claw channel credentials and allowing it to register webhooks and bind an entity. Configure a valid public webhook URL before startup, watch for bot-to-bot prompt-injection or reply loops, and avoid running the README upgrade scripts without reviewing and pinning the version.
VirusTotal
VirusTotal engine telemetry is currently stale for this artifact.
Static analysis
No suspicious patterns detected.