Security audit
PostLake
Security checks across malware telemetry and agentic risk
Overview
This plugin does what it claims: it connects OpenClaw to PostLake so an agent can upload media and publish or schedule social posts using the user's API key.
Install only if you want OpenClaw agents to be able to act through your PostLake account. Because the plugin can publish public social posts and upload local media that you point it at, review content, target accounts, and timing before approving agent actions.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.