Security audit
Moonshot OpenClaw provider
Security checks for vulnerabilities and agentic risk
Overview
This package is a coherent Moonshot/Kimi provider plugin that uses API keys and external network calls for its stated model, media, and web-search features.
Install this only if you intend to use Moonshot/Kimi services and are comfortable providing an API key and sending relevant prompts, media, or search queries to Moonshot or any configured custom base URL.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.