Security audit
Openclaw Seatalk
Security checks across malware telemetry and agentic risk
Overview
This SeaTalk plugin mostly matches its stated chat-integration purpose, but it grants broad access to workplace messages and can send bot secrets to a configured relay service, so it should be reviewed before installation.
Install only if you control the SeaTalk bot app and can restrict who may message it. Prefer webhook mode or a trusted wss:// relay you operate, avoid ws:// relay URLs, disable unneeded history/get-message tools, keep groupPolicy on allowlist or disabled, and treat all enabled chats and media as content that can enter the agent context and be stored in OpenClaw sessions.
VirusTotal
60/60 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.