Security audit
OKed
Security checks for vulnerabilities and agentic risk
Overview
The plugin provides the advertised approval controls, with disclosed sharing of action details and some dependency behavior that remains unverified.
Install if you trust OKed to receive action details, which can contain confidential information. Disable sendScriptContent to omit script excerpts. Set OKED_STRICT_FAIL_CLOSED=1 if sensitive actions must remain blocked during outages. Use the declared minimum OpenClaw version and review allow-list overrides carefully. Automatic activity heartbeats and SDK security behavior were not fully verifiable from this package.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.