Security audit

Tinker Budget Panel

Security checks for vulnerabilities and agentic risk

Overview

This plugin is a disclosed budget dashboard that reads configured provider usage and quota data without hidden install scripts or destructive behavior.

Install only if you want this gateway to periodically read configured provider usage, quota, and cost data. Review which auth profiles are available to the gateway, whether OPENAI_ADMIN_API_KEY or googleServiceAccountFile is configured, and keep the optional model-config and anatomy timeline surfaces disabled unless you need those panels.

SkillSpector

SkillSpector was not run because this plugin release contains no bundled skills.

Static analysis

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: dist/index.js:21
Evidence: this.workspaceDir = workspaceDir || process.env.OPENCLAW_WORKSPACE || path.join(process.env.HOME || "", ".openclaw", "workspace");

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: index.ts:473
Evidence: const adminKey = process.env.OPENAI_ADMIN_API_KEY;

Sensitive-looking file read is paired with a network send.

Warn

Code: suspicious.potential_exfiltration
Location: index.ts:669
Evidence: readFileSync(`${process.env.HOME}/.openclaw/workspace/memory/gemini-usage.json`, "utf-8"),