Security audit
ThunderClaw
Security checks for vulnerabilities and agentic risk
Overview
ThunderClaw is a disclosed Thunderbird-to-OpenClaw pairing plugin; it handles sensitive email content after operator-approved pairing but I found no hidden or purpose-mismatched behavior.
Install only if you want Thunderbird to hand selected message or draft content to OpenClaw agents. Review pairing requests carefully, approve only devices you recognize, revoke unused devices, and consider a dedicated OpenClaw agent if you want separate mail personality, workspace, memory, or model settings.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.