Security audit
ClickClack
Security checks for vulnerabilities and agentic risk
Overview
This package is a coherent ClickClack chat channel plugin that uses bot tokens and network access for the disclosed chat integration.
Before installing, confirm you trust the ClickClack server and bot token scope. Use allowFrom, requireMention, toolsAllow, and commandMenu/discussions settings to limit who can trigger the agent and what it may do.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.