Security audit
Trakt
Security checks for vulnerabilities and agentic risk
Overview
This plugin appears to do what it claims: connect OpenClaw to Trakt.tv through a local Trakt CLI, with disclosed account read and watchlist/history update actions.
Install only if you are comfortable giving the plugin and the required trakt-cli access to your Trakt account. Be especially careful with remove tools: removing a show from history is disclosed as wiping all episode plays for that show, not just one watch event.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.