Security audit
OpenClaw SysML v2 Export
Security checks for vulnerabilities and agentic risk
Overview
The plugin’s local exports, optional model analysis, and separate Toolkit installation fit its documented purpose and remain user-controlled.
Review selected instruction files and scheduled prompts before requesting inference, because their full text reaches your configured model provider. Keep exports private and inspect them before sharing. This review examined the supplied code and bundled WebAssembly interface; it did not execute the plugin or inspect the separately downloaded Toolkit.
SkillSpector was not run because this plugin release contains no bundled skills.