Security audit
ebb-ai — carbon-aware deferral
Security checks for vulnerabilities and agentic risk
Overview
This plugin matches its stated purpose: it queues deferred AI tasks for carbon-aware execution and clearly discloses its local storage, background dispatch, provider API use, and optional external result delivery.
Before installing, decide whether deferred prompts and results may be stored in ~/.ebb-ai and run later by a startup background dispatcher. For sensitive tasks, choose queue delivery, avoid webhook/Telegram/file destinations unless you trust them, and consider disableStartupDispatch if you do not want automatic draining of due tasks.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.
