Security audit
Buzz
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent Buzz channel plugin that uses a bot identity to connect OpenClaw agents to approved Buzz rooms, with sensitive behavior disclosed and scoped to that purpose.
Before installing, use a dedicated Buzz bot key, not a human owner key, and configure only the relay and rooms where you want the agent to read and send messages. Treat Buzz room messages as untrusted agent input, and review allowlist, mention, and room settings before enabling automatic responses.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.
