Security audit
LFG Alarm
Security checks for vulnerabilities and agentic risk
Overview
This package provides clearly disclosed, user-controlled access to a hosted alarm service, including shared alarms that can ring other participants’ phones.
Install if you want LFG Alarm to manage phone alarms through your account. Review the OAuth permissions and consider enabling `openclaw mcp configure lfg-alarm --approval prompt` before allowing changes. Alarm details go to LFG Alarm, and retrieved account information can reach your model provider. Protect private webhook links, check shared participants, and remove unwanted alarms separately when disconnecting. The bundled instructions were manually reviewed despite SkillSpector treating the package as inapplicable; hosted server behavior remains outside this artifact review.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.