Security audit
Tinker ORCA
Security checks for vulnerabilities and agentic risk
Overview
This plugin appears to only coordinate local file-edit leases and does not show hidden data collection or destructive behavior.
Reasonable to install if you want local coordination between agents editing the same working tree. Be aware it persists lease metadata under ~/.openclaw/run/orca-leases and exposes operator-scoped lease RPCs, so only enable it where those coordination controls are desired.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.