Security audit
ISPConfig
Security checks across malware telemetry and agentic risk
Overview
This plugin coherently exposes ISPConfig administration tools and includes clear default safeguards, but users should configure it with least-privilege API credentials and a narrow allowlist.
Install only if you intend to let OpenClaw manage an ISPConfig server. Use a dedicated ISPConfig Remote User with the minimum API permissions needed, keep readOnly enabled by default, set allowedOperations to a small explicit list, and enable write tools only for deliberate administrative sessions.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
60/60 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.