Security audit
OpenClaw Cloudflare AI Gateway Provider
Security checks for vulnerabilities and agentic risk
Overview
ClawScan reports no findings in its completed scan and rates the plugin benign, with all five reviewed dimensions marked ok.
The verdict is benign, which means the reported behavior appears coherent and purpose-aligned; it does not mean risk-free. Consider whether you need this plugin and review its requested access before installing.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
SkillSpector was not run because this plugin release contains no bundled skills.
Endor dependency reachability
Checked Nov 8, 2026 · 9:58 AM UTC
No reachable vulnerabilities reported
Endor dependency scan completed.