Security audit
OpenClaw Volcengine Provider
Security checks for vulnerabilities and agentic risk
Overview
The package provides model and speech services with credential use and network requests that fit its stated purpose.
Using these providers sends model inputs or speech text to their external services and may incur charges. Protect your API keys and review any custom speech endpoint, since it receives credentials and text. SkillSpector was not applicable; this verdict follows inspection of the package code and manifest.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.