Security audit
Contro1 Approvals
Security checks across malware telemetry and agentic risk
Overview
This plugin is a disclosed approval gate for sensitive OpenClaw tool calls, with no artifact evidence of credential collection, network calls, exfiltration, or destructive behavior.
Install only if you want tool calls matching the documented sensitive patterns to pause for human approval. Use a current patched OpenClaw version, review any custom CONTRO1_TOOL_POLICY regexes carefully, and remember that Contro1 credentials belong in the separate bridge, not in this plugin.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
64/64 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.