Security audit
ThunderClaw
Security checks for vulnerabilities and agentic risk
Overview
This Thunderbird/OpenClaw plugin matches its stated purpose and shows disclosed, scoped pairing and email-transform behavior without hidden or destructive actions.
Install only if you intend to connect Thunderbird to OpenClaw for email summarizing, translating, or drafting. Pairing grants the Thunderbird extension a device credential that can request those transformations until revoked or expired, so review pairing requests carefully and revoke unused devices.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.