Security audit
MPP
Security checks for vulnerabilities and agentic risk
Overview
This plugin enables disclosed, capped pay-per-use API payments for OpenClaw and does not show hidden or unrelated behavior.
Install only if you intend OpenClaw to make paid API calls. Review the wallet spending limit and expiry, prefer capped Tempo access keys over a raw private key, and disable or remove the plugin when you do not want automatic payment-aware fetch behavior.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.