Security audit
OpenClaw Voyage Provider
Security checks for vulnerabilities and agentic risk
Overview
The plugin sends memory text to Voyage AI for embeddings, consistent with its stated purpose.
Review which memory content OpenClaw supplies and whether automatic provider selection is enabled. That content may leave your device for remote processing. Protect the Voyage API key and verify any custom endpoint. SkillSpector reported no applicable findings; this verdict also reflects direct inspection of the bundled code.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.