Security audit
Muse Code agent runtime
Security checks for vulnerabilities and agentic risk
Overview
This opt-in plugin connects OpenClaw to Muse Code with purpose-aligned credential use and explicit permission checks.
Enable Muse only for sessions where you accept host-level coding access and sending conversation and workspace context to Meta through Muse. Keep approvals enabled unless you intend unrestricted execution. The separately installed Muse CLI receives inherited environment variables and credentials; its behavior and the external SDK were outside this inspection.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.
Endor dependency reachability
Checked Nov 3, 2026 · 5:35 AM UTC
No reachable vulnerabilities reported
Endor dependency scan completed.