Security audit
BridgeNode
Security checks across malware telemetry and agentic risk
Overview
The package is a disclosed payment-enabled OpenClaw plugin for BridgeNode x402 LLM inference, with scoped payment controls matching its stated purpose.
Only install this if you intend to let an agent spend from a Solana USDC wallet for BridgeNode inference. Keep the wallet minimally funded, use a SecretRef or environment variable for the private key, and review the spend cap, recipient wallet, RPC URL, and bridgenode.cc origin before enabling paid chat completions.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
60/60 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.