Security audit
Mattermost OpenClaw channel
Security checks across malware telemetry and agentic risk
Overview
This official OpenClaw Mattermost plugin uses sensitive chat credentials and Mattermost API access, but the behavior is disclosed, purpose-aligned, and bounded by configuration.
Install only if you intend OpenClaw to interact with your Mattermost workspace. Use a least-privilege Mattermost bot token, configure allowlists for DMs/groups, set allowedSourceIps for non-loopback callbacks, and enable slash commands or private-network access only when needed.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.