Security audit
Tlon/Urbit
Security checks for vulnerabilities and agentic risk
Overview
This is a disclosed Tlon/Urbit chat channel plugin whose network access, login code use, message posting, invite handling, and storage uploads fit its stated chat-integration purpose.
Install only if you intend OpenClaw to access and act through your Tlon/Urbit account. Review the login code, private-network opt-in, DM/group allowlists, ownerShip, auto-discovery, and auto-accept invite settings because they determine who can reach the agent and when it can join or respond in Tlon conversations.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.