Security audit
Belay
Security checks for vulnerabilities and agentic risk
Overview
Belay is a disclosed local guardrail plugin for limiting agent spend and runaway behavior, with sensitive capabilities that are purpose-aligned and user-configured.
Before installing, be comfortable granting this plugin gateway hook access and authority to interrupt agent work. Start in observe mode, configure explicit limits and file paths, prefer botTokenEnv over inline alert tokens, and only enable account pausing after confirming the behavior on your gateway.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.