Security audit
PowPow
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent PowPow chat channel plugin that polls configured PowPow conversations and sends replies using a user-provided webhook token.
Install only if you intend OpenClaw to act as your PowPow digital human. Treat the webhook token as sensitive, prefer the default HTTPS PowPow endpoint, and review dmPolicy/allowFrom so only intended visitors can trigger agent conversations.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.