Security audit
OmniRoute
Security checks for vulnerabilities and agentic risk
Overview
The plugin’s credential use and data transfers fit its documented purpose of connecting OpenClaw to your chosen OmniRoute gateway.
Trust the configured OmniRoute gateway and its upstream providers with the content you submit. Use HTTPS for remote gateways, protect the API key, and review provider charges. Enabling embeddings sends the text supplied by OpenClaw’s memory integration to that gateway.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.