Security audit
Diagnostics Prometheus
Security checks across malware telemetry and agentic risk
Overview
This plugin appears to be a disclosed Prometheus metrics exporter for OpenClaw diagnostics, with no evidence of hidden data access, exfiltration, or destructive behavior.
Install this only where gateway-authenticated operators or scrapers are allowed to see operational metrics such as model names, tool names, channels, costs, token counts, and memory statistics. I found no file access, credential access, outbound network calls, shell execution, or destructive behavior in the submitted artifact.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
62/62 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.