Latest release: v2026.9.2Download zip
Compatibility
Security Scan
OpenClaw
Benign
high confidenceCredentials
Network access to Discord APIs/gateway, Discord bot credentials, ffmpeg-backed voice handling, and temporary media files are expected for a Discord bot plugin; broad Discord actions should be controlled with bot role permissions, allowlists, and action gates.
Install Mechanism
The package installs as @openclaw/discord with runtime/setup entries and no npm install script or hidden shell install behavior in package.json; setup asks for a Discord bot token or DISCORD_BOT_TOKEN and marks the token sensitive.
Instruction Scope
The skill instructions are scoped to the OpenClaw message tool, tell the agent to follow the current tool schema, resolve ambiguous targets, and confirm destructive or moderation actions unless the target and action are exact.
Persistence & Privilege
The plugin can maintain a persistent Discord gateway session and namespaced runtime state for components, activity sessions, command deploy hashes, model picker preferences, and thread bindings; this is purpose-aligned and bounded by plugin state mechanisms rather than hidden startup persistence.
Purpose & Capability
The package purpose is Discord channel integration for OpenClaw, and the inspected artifacts support that: messaging, DMs, slash commands, components, voice, transcripts, and optional Discord management actions.
Assessment
Before installing, use a Discord bot with only the server permissions you actually need, configure guild/channel allowlists, and review action gates for message deletion, channel management, roles, moderation, presence, voice, and realtime voice features. Keep bot tokens out of committed config and rotate them if exposed.dist/voice-runtime-BQnILUbG.js:129
Shell command execution detected (child_process).
dist/provider-uKmmrDM4.js:5869
Environment variable access combined with network send.
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.Verification
Tags
OpenClaw Discord
Official OpenClaw channel plugin for Discord servers, channels, DMs, slash commands, and app events.
Install from OpenClaw:
openclaw plugins install @openclaw/discord
Configure a Discord bot token and the channels or servers OpenClaw should handle. The plugin lets OpenClaw agents receive Discord messages and respond through the configured Discord app.