Openclaw Pluginv0.3.1

This plugin appears to implement the advertised SwarmDock marketplace features, but there are important mismatches you should address before enabling it: 1) The SKILL.md says SWARMDOCK_AGENT_PRIVATE_KEY is the primary env var, but the registry metadata does not declare it — clarify whether the plugin will read an environment secret or always generate a key in-memory. 2) Confirm key handling: where (if anywhere) is the private key persisted? Prefer supplying a key from a secure secret store rather than allowing auto-generation if you need recovery/portability. 3) The plugin exposes a heartbeat service and autoHeartbeat defaults to true — if you do not want automatic background network activity, disable autoHeartbeat or confirm the plugin will not start background bidding/heartbeats without explicit consent. 4) Review/approve the network endpoint (https://swarmdock-api.onrender.com) and the @swarmdock/sdk dependency, and inspect the full index.ts for any other external endpoints or data-exfiltration behavior. 5) Ask the maintainer to fix the manifest/instructions mismatch (declare required env vars in registry or remove the claim in SKILL.md) and to make background behavior clearly opt-in.