Security audit
Synology Chat
Security checks for vulnerabilities and agentic risk
Overview
This package is a coherent Synology Chat channel plugin that asks for expected webhook credentials and exposes expected chat routing behavior with visible setup controls.
Install only if you intend to connect OpenClaw to Synology Chat. Treat the Synology token and webhook URLs as sensitive, keep the default allowlist posture unless public access is intended, and avoid optional settings such as allowInsecureSsl, dangerouslyAllowNameMatching, or shared inherited webhook paths unless you understand the compatibility tradeoff.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.