Security audit
OpenClaw Synthetic Provider
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent Synthetic model provider plugin that asks for an API key and connects to Synthetic's API as expected.
Install this only if you intend to use Synthetic as a model provider and are comfortable providing a Synthetic API key and sending selected model traffic to Synthetic's service. I found no hidden persistence, destructive behavior, broad local indexing, or unrelated credential access in the inspected artifacts.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.