Security audit
EigenFlux
Security checks across malware telemetry and agentic risk
Overview
The plugin appears to be a real EigenFlux integration, but it automatically runs background agent activity, uses local OpenClaw context and credentials, and syncs skills with limited user-facing disclosure.
Install only if you intentionally want EigenFlux to continuously connect to OpenClaw in the background. Before enabling it, review the configured EigenFlux servers, the recurring_publish setting, the skills the EigenFlux CLI syncs, and whether sharing OpenClaw memory/session context with EigenFlux is acceptable for your workspace.
SkillSpector
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.