Security audit
ebb-ai — carbon-aware deferral
Security checks across malware telemetry and agentic risk
Overview
The plugin mostly matches its carbon-aware scheduling purpose, but it needs review because broad automatic scheduling and background execution can later send full task results outside OpenClaw.
Review this before installing if you handle sensitive prompts or outputs. Use queue delivery for sensitive tasks, verify any webhook URL, Telegram target, or file path before enabling it, and consider setting disableStartupDispatch if you do not want queued tasks to run automatically in the background.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
62/62 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.