Security audit
ClickClack
Security checks for vulnerabilities and agentic risk
Overview
This package is a coherent ClickClack chat-channel plugin that uses bot credentials and configured ClickClack endpoints for the expected chat integration behavior.
Install only if you intend OpenClaw to connect to a ClickClack workspace as a bot. Review the configured baseUrl/apiBaseUrl, token source, allowFrom/mention settings, and the optional discussions feature, since enabling discussions can create and update managed ClickClack channels and relay selected session context through host-scoped tools.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.