Back to plugin

Security audit

Databricks

Security checks for vulnerabilities and agentic risk

Overview

The package implements a narrowly scoped Databricks read-only SQL plugin and its requirements/behavior are consistent with that purpose, with only a small metadata mismatch about declared environment variables.

This plugin appears to be what it claims: a conservative, read-only Databricks SQL connector. Before installing: (1) prefer installing from the publisher's known registry entry (npm/ClawHub) and verify the package integrity; (2) provide a least-privilege Databricks PAT (read-only / query-only if possible) and supply host/warehouse via your secret store or OpenClaw config, not inline config files; (3) confirm the host you configure matches your Databricks domain and the plugin's allowed suffixes; (4) be aware the plugin will call your configured Databricks host (it uses the SQL Statements API) and will redact tokens in logs, but you should still rotate tokens and limit scope; (5) note the registry metadata had a mismatch about required env vars—trust the plugin's README/openclaw.plugin.json for actual requirements. If you need additional assurance, review the published package contents (package.json and openclaw.plugin.json) and verify the token-handling and allowlist logic in src/config.ts and src/errors.ts.

Static analysis

No suspicious patterns detected.