Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward Chinese-language setup guide for configuring OpenClaw to use DeepSeek, with no hidden code or automatic actions.
Install this only if you intend to use DeepSeek as an OpenClaw model provider. Prompts sent through that provider may be processed by DeepSeek, and the API key should be handled like a secret and stored only in trusted local configuration.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
providers: deepseek: apiKey: sk-xxxxxxxx baseURL: https://api.deepseek.com/v1
### Step 3: 测试连接
The manifest metadata includes "chinese" as a defining keyword and identifies the author as the "OpenClaw CN Team," which signals a Chinese-language or locale-specific constraint. There is no accompanying description that offers language choice or explains a justified region-specific limitation, so this appears to force or assume a locale without user opt-in.
The document presents all user-facing instructions, explanations, and support text in Chinese only. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale constraint is explicitly justified.