Security audit
OmniRoute
Security checks for vulnerabilities and agentic risk
Overview
This plugin coherently adds OmniRoute as an OpenClaw provider and its sensitive behavior is expected for that purpose.
Install this only if you trust the OmniRoute gateway and any upstream providers it routes to, because your prompts, generated-media requests, embeddings text, speech/transcription audio, web search queries, and web fetch URLs may be sent through that service. Use a scoped OmniRoute API key and configure the base URL deliberately.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.