Security audit
Lobster
Security checks for vulnerabilities and agentic risk
Overview
This plugin provides a disclosed optional workflow runner with approval support and no evidence of hidden or unrelated behavior.
Install only for agents that need repeatable workflow automation, and use a non-empty tool allowlist so Lobster pipelines can invoke only the tools you intend. Review any workflow before running it, especially workflows that send messages, post content, delete data, or access connected accounts.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.