Latest release: v2026.5.28Download zip
Capabilities
Compatibility
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The package purpose is Amazon Bedrock integration, and the artifacts register a Bedrock provider, stream chat requests to Bedrock Runtime, discover Bedrock models, and create Bedrock embeddings; these capabilities match the stated purpose.
Instruction Scope
The runtime can use AWS environment variables, AWS profiles, bearer tokens, and shared AWS config through the AWS SDK, and model discovery may run when configured or when AWS auth is present. This is disclosed in config/help text and is expected for a Bedrock provider.
Install Mechanism
The artifact is an npm pack for @openclaw/amazon-bedrock-provider with runtime extension files and a shrinkwrap. I found no install, preinstall, postinstall, prepare script, command hook, or hidden setup entry that would execute unrelated code during installation.
Credentials
The plugin sends user prompts, images, tool-call context, and embedding text to Amazon Bedrock endpoints and may read local AWS credential sources through the standard AWS SDK chain. That access is sensitive but proportionate to the provider's function.
Persistence & Privilege
The code uses in-memory caches for discovery/profile traits with configurable refresh behavior, but I found no durable persistence, background worker, privilege escalation, broad local indexing, destructive file operations, or unrelated credential handling.
Scan Findings in Context
[VirusTotal clean engine telemetry] expected: VirusTotal reported 0 malicious and 0 suspicious detections across 62 undetected engines; this supports, but does not by itself determine, the benign verdict.
[SkillSpector clean report] expected: SkillSpector reported no issues, which is consistent with the inspected artifacts and the provider's declared behavior.
[metadata executes-code/provider:amazon-bedrock] expected: The metadata declares executable provider code for Amazon Bedrock. The executable code is the provider implementation itself, not unrelated automation.
Assessment
Install this if you intend OpenClaw to use your AWS account for Bedrock. Before enabling it, confirm the AWS profile or environment credentials have only the permissions you want OpenClaw to use, and remember that chat content, images, tool context, and memory embedding text may be sent to Amazon Bedrock under your account.dist/stream.runtime.js:39
File appears to expose a hardcoded API secret or token.
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.