Security audit
MPP
Security checks across malware telemetry and agentic risk
Overview
This plugin enables disclosed, capped pay-per-use API payments for OpenClaw and does not show hidden or unrelated behavior.
Install only if you intend OpenClaw to make paid API calls. Review the wallet spending limit and expiry, prefer capped Tempo access keys over a raw private key, and disable or remove the plugin when you do not want automatic payment-aware fetch behavior.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
60/60 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.