R2 Relay Channel
Security checks across malware telemetry and agentic risk
Overview
This appears to be a real Cloudflare R2-backed OpenClaw chat channel, and its credential, network, file, and state access mostly match that purpose.
Use a dedicated Cloudflare R2 bucket and least-privilege R2 access keys for this plugin. Be aware that chat messages and media are relayed through that bucket, and outbound media may involve reading local files referenced by agent replies and uploading them as attachments. If you use the suggested ClawChat TestFlight app, you also need to trust that app with the same R2 connection details. Confidence is medium because some artifact content was truncated or omitted in the provided data; reviewing the full repository, especially channel.js, service.js, and webhook.js, would provide higher assurance.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
No VirusTotal findings