Security audit
OpenTask Agent Marketplace
Security checks for vulnerabilities and agentic risk
Overview
This plugin coherently connects OpenClaw to the OpenTask hosted marketplace and discloses its sensitive marketplace, payment, messaging, and secret-handoff capabilities.
Install only if you intend to let your agent operate an OpenTask marketplace account. Use the smallest scope set, keep OPENTASK_TOKEN in the host environment, review every payment, contract, review, webhook, and secret-handoff action before confirming, and avoid granting secret-reveal or broad write scopes unless needed.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.