Security audit
Google Chat
Security checks for vulnerabilities and agentic risk
Overview
This package is a coherent Google Chat channel plugin that uses Google service-account credentials to receive and send chat messages through OpenClaw.
Install only if you intend to connect OpenClaw to a Google Chat app. Treat the service-account JSON or file path as sensitive, configure DM and space allowlists carefully, and review native approval routing before allowing approvals from Google Chat.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.