Security audit
ActiveWiki
Security checks across malware telemetry and agentic risk
Overview
ActiveWiki is mostly purpose-aligned, but it auto-starts a memory plugin for private wiki retrieval while the published artifact is incomplete enough that its scope controls and helper behavior cannot be verified.
Review this before installing. The package appears incomplete and may fail at runtime because dist/index.js imports missing dist/lib modules. If republished with those helpers, verify the scope configuration, wiki root paths, subprocess environment allowlist, and OpenClaw version resolution before enabling it on private or family wiki data.
SkillSpector
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
60/60 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.