Security audit
Discord Activity
Security checks for vulnerabilities and agentic risk
Overview
This plugin coherently shows OpenClaw activity in Discord and its Discord message updates are disclosed and purpose-aligned.
Before installing, make sure the Discord channels or DMs where the bot posts status updates are appropriate for potentially sensitive live tool metadata. Keep Discord tokens in OpenClaw config or secrets, and consider replyMode or plugin scoping if shared-channel visibility is too broad.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.
