Security audit
Diagnostics Prometheus
Security checks for vulnerabilities and agentic risk
Overview
This package is a coherent Prometheus diagnostics exporter that exposes OpenClaw runtime metrics through an authenticated Gateway route.
Install only where Prometheus scrapers are trusted to view Gateway operational metrics. The endpoint is Gateway-authenticated and checks operator read-or-higher scope, but exported labels may still reveal internal usage patterns and model/tool activity.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.