Latest release: v2026.7.1Download zip
Compatibility
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The package name, README, manifest, and runtime code consistently describe a DeepSeek provider plugin with model catalog entries, provider endpoint metadata for api.deepseek.com, and DeepSeek API-key setup.
Instruction Scope
The artifact contains provider registration and catalog/configuration code, not agent prompt instructions, hidden workflow changes, or unrelated runtime directives.
Install Mechanism
The npm package has no install/postinstall lifecycle scripts, no bundled third-party dependencies in the shrinkwrap, and declares normal OpenClaw compatibility and runtime extension metadata.
Credentials
The plugin requires DEEPSEEK_API_KEY and enables calls to DeepSeek, which is expected for a DeepSeek provider but means prompts/usage may be sent to that external provider when selected.
Persistence & Privilege
No background persistence, filesystem mutation, shell execution, privilege escalation, or broad local data access was found; secret handling appears delegated to OpenClaw's provider configuration/store APIs.
Scan Findings in Context
[SkillSpector] expected: No SkillSpector findings were supplied, so there were no advisory concerns to validate.
[StaticScan] expected: Static scan reported clean with no findings, and artifact inspection found no hidden or unrelated risky behavior.
[VirusTotal] expected: VirusTotal telemetry was clean across engines; this supports but does not determine the benign verdict.
Assessment
Install if you intend to use DeepSeek through OpenClaw. Before enabling it, make sure you trust DeepSeek with the prompts and metadata sent through that provider and manage the DEEPSEEK_API_KEY as a secret.Verification
Tags
OpenClaw DeepSeek Provider
Official OpenClaw provider plugin for DeepSeek.
Install from OpenClaw:
openclaw plugins install @openclaw/deepseek-provider
openclaw gateway restart
See https://docs.openclaw.ai/providers/deepseek for setup and configuration.