Security audit
Keatz
Security checks for vulnerabilities and agentic risk
Overview
The plugin matches its Keatz dating-channel purpose, but it can run in the background, automatically send dating replies/account update payloads, and may expose its secret channel token in logs.
Install only if you are comfortable with an agent autonomously participating in Keatz conversations. Treat the pairing code and channel token as secrets, verify the package identity, limit the agent’s other tools/memory while this channel is active, and make sure you know how to disable the plugin or revoke the token.
Static analysis
No suspicious patterns detected.
