2026.7.1
@openclaw/googlechat
OpenClaw Google Chat channel plugin for spaces and direct messages.
Rank#1850
Ecosystem
1 related extensionSecurity Findings
4Non-primary copy of an established plugin
SuspiciousEcosystemShares the normalized name 'googlechat' with the established primary claudeplugins/airaise/googlechat (lineage trust 82); this copy ranks 1850 of 2 in the cluster. -30 trust.
pull_request_target with secrets
MaliciousLineage[.github/workflows/auto-response.yml] pull_request_target with secrets
Unpinned dependencies
SuspiciousLineage1 unpinned: @openclaw/ai
Workflow makes outbound network call
SuspiciousLineage[.github/workflows/mantis-slack-desktop-smoke.yml] curl -fsS --connect-timeout 5 --max-time 15 https://checkip.amazonaws.com
Editions
1- 2026.7.1Scanned Aug 4, 2026, 03:33 PMHigh