Primeta Channel
Security checks across malware telemetry and agentic risk
Overview
The plugin's code and runtime instructions align with its stated purpose (bridging Primeta avatar UI to a local OpenClaw agent); requested credentials and actions are proportional and expected for that functionality.
This plugin appears to do exactly what it says: connect your OpenClaw agent to Primeta's avatar UI using a Primeta API token. Before installing: 1) Ensure you trust primeta.ai (you will give an API token that the plugin writes into ~/.openclaw/openclaw.json in plaintext). 2) Review the SKILL.md raw file for any unexpected hidden characters (the pre-scan found Unicode control chars, likely from embedded images). 3) Remember the plugin opens an outbound WebSocket to the configured Primeta server and exposes a local /primeta endpoint (SSE) for clients; if you enable the endpoint, follow your normal local network security practices. If you are comfortable storing the token locally and trust Primeta, the package is coherent and reasonable to install.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
No VirusTotal findings