Security audit
Lobster
Security checks for vulnerabilities and agentic risk
Overview
This plugin is a disclosed optional workflow runner with approval checkpoints, but it should be enabled only for agents with tightly scoped tool allowlists.
Install only if you want agents to run Lobster workflows. Because workflows can call other OpenClaw tools when policy allows it, use a non-empty allowlist for the agent, avoid broad tool access, and review workflow files before running them, especially when they can send, post, delete, or access private services.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.