Security audit
OpenClaw Qwen Cloud Provider
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent Qwen Cloud provider plugin that registers model, media, and video provider support and uses Qwen API keys only for the expected provider functionality.
Install only if you intend to use Qwen Cloud through OpenClaw. Configure API keys through the guided secret flow or documented environment variables, and remember that model prompts, images, or videos routed to this provider will be processed by Qwen/Alibaba endpoints.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.