Back to plugin

Security audit

Keatz

Security checks for vulnerabilities and agentic risk

Overview

The plugin matches its Keatz dating-channel purpose, but it can run in the background, automatically send dating replies/account update payloads, and may expose its secret channel token in logs.

Install only if you are comfortable with an agent autonomously participating in Keatz conversations. Treat the pairing code and channel token as secrets, verify the package identity, limit the agent’s other tools/memory while this channel is active, and make sure you know how to disable the plugin or revoke the token.

Static analysis

No suspicious patterns detected.