Security audit
Plan Tracker
Security checks across malware telemetry and agentic risk
Overview
The skill appears purpose-built for plan tracking, but it performs setup-time changes and starts persistent background reminder services with limited explicit user control.
Review this before installing if you do not want a plugin to modify OpenClaw configuration or start background reminder processes during install. Use dry-run/manual setup where possible, keep email disabled unless you accept sending plan reminder content and recipient data to mail.tempbox.cn, and inspect any webhook or cron delivery target before enabling push notifications.
VirusTotal
52/52 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.