Security audit
CoreWeave Forge
Security checks for vulnerabilities and agentic risk
Overview
This plugin transparently exports OpenClaw agent tracing data to CoreWeave Forge/W&B for observability, with sensitive content capture clearly disclosed and configurable.
Install only if you are comfortable sending agent telemetry to CoreWeave Forge/W&B. By default, captured traces may include prompts, replies, tool inputs, and tool results without redaction, so set captureContent=false or scrub sensitive content upstream if your work may include secrets, customer data, or regulated information.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.