Security audit
Bitrix24
Security checks for vulnerabilities and agentic risk
Overview
This package is a coherent Bitrix24 OpenClaw channel plugin with disclosed polling, messaging, and optional business tools that are scoped and off or allowlisted by default.
Install only if you intend this agent to answer approved Bitrix24 users. Use a dedicated low-privilege Bitrix24 user for webhooks, keep group chats disabled unless needed, limit allowFrom carefully, and enable the optional sheet and CRM tools only for agents that should have those business capabilities.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.