OpenClaw Security Audit: Detecting Malicious AI Agent Plugins in Your Local Stack