Security audit
Nextcloud Talk
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent Nextcloud Talk channel plugin that uses expected chat credentials, webhooks, and message-sending behavior for its stated purpose.
Install only if you intend OpenClaw agents to receive and send messages in your configured Nextcloud Talk rooms. Review the bot secret/API credential handling, room allowlists, group policy, webhook exposure, and any private-network opt-in before enabling it.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.