Security audit
ThunderClaw
Security checks across malware telemetry and agentic risk
Overview
ThunderClaw is a disclosed Thunderbird/OpenClaw bridge that stores pairing credentials and runs restricted email transforms through configured OpenClaw agents.
Install only if you intend to connect Thunderbird to OpenClaw for email rewriting, translation, and summarization. Review pairing requests carefully, revoke devices you no longer use, and remember that selected email content will be processed by your configured OpenClaw agent/model provider even though provider credentials remain in OpenClaw.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.