Back to plugin

Security audit

Diagnostics Prometheus

Security checks for vulnerabilities and agentic risk

Overview

This package is a coherent Prometheus diagnostics plugin that exposes runtime metrics through an authenticated OpenClaw gateway route.

Install this only where an authenticated Prometheus scrape endpoint for OpenClaw operational metrics is intended. Treat the metrics as operationally sensitive and restrict gateway operator-read access and scraper credentials accordingly.

SkillSpector was not run because this plugin release contains no bundled skills.

Static analysis

No suspicious patterns detected.