Security audit
Google Chat
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent Google Chat channel plugin that uses Google service-account credentials to receive messages and send replies as disclosed.
Before installing, confirm you intend to connect OpenClaw to Google Chat, provide a least-privilege service account, and configure allowed users/spaces and DM/group policies carefully because this plugin can receive Chat events and post or update messages through the configured app.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.