Security audit
Security checks across malware telemetry and agentic risk
This appears to do what it says—control a local Factorio game through a bundled mod and local RCON—though it has powerful in-game access and some optional environment variables are not declared in the registry metadata.
Install this only if you are comfortable giving OpenClaw admin-level control over your local Factorio session. Keep RCON bound to 127.0.0.1, do not expose the port publicly, and leave mutation confirmation enabled unless you intentionally want the agent to craft, place, move, mine, destroy, give, or remove items without asking each time. For stronger assurance, review the extracted Factorio mod contents and the full untruncated index.js before installing.
50/50 vendors flagged this plugin as clean.
Detected: suspicious.exposed_secret_literal
const password = [REDACTED] || process.env.FACTORIO_RCON_PASSWORD || getConfigValue(pluginConfig, "password", creds?.password || "");
