Security audit
Nessie
Security checks across malware telemetry and agentic risk
Overview
This plugin coherently connects OpenClaw to the hosted Nessie MCP service and clearly discloses its account setup, local config write, and Nessie read/write guidance.
Before installing, understand that this will let OpenClaw access your Nessie context library, including connected notes, AI conversation history, and shared team or collaborator sources according to Nessie's access controls. Setup stores a Nessie bearer key in your local OpenClaw config file in plaintext with owner-only permissions. Persistent Nessie changes should require a preview and your explicit confirmation.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.