Security audit
OpenClaw Kimi Coding Provider
Security checks for vulnerabilities and agentic risk
Overview
This package is a coherent Kimi model-provider plugin that uses a user-supplied API key to send model requests to Kimi's coding endpoint.
Install this only if you intend to use Kimi as a model provider and are comfortable sending selected conversations, code, and prompts to Kimi's API under your Kimi API key. Review any custom base URL or headers you configure, since those can change where requests are sent.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.