Security audit
Tidegap — carbon-aware deferral
Security checks for vulnerabilities and agentic risk
Overview
This plugin clearly discloses that it schedules deferred AI tasks, stores a local queue, runs a background dispatcher, and can deliver results through user-chosen channels.
Before installing, be comfortable with deferred prompts being stored locally until completion and with due tasks running in the background. Use queue delivery for sensitive work; Telegram/chat, webhook, and file delivery can send or write the full result outside the OpenClaw session, and webhooks/file paths should be treated as trusted destinations.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.
