Latest release: v2026.10.6Download zip
Compatibility
Security Scan
OpenClaw
Benign
high confidenceCredentials
Moonshot-specific credentials authenticate model, media, and search requests. Official endpoints are defaults; explicitly configured custom endpoints can receive the search credential and query.
Install Mechanism
Standard OpenClaw plugin installation loads bundled JavaScript. The package declares no installation lifecycle scripts.
Instruction Scope
No bundled skills or evaluator-directed instructions were found. SkillSpector was not applicable; independent runtime inspection found no unrelated actions.
Persistence & Privilege
Setup updates provider configuration through host helpers, and search caching uses a configurable TTL. No background workers, privilege escalation, broad local indexing, or unrelated credential access were found.
Purpose & Capability
Runtime registrations match the declared Moonshot integration and its model, media, and search capabilities, consistent with [OpenClaw documentation](https://docs.openclaw.ai/providers/moonshot).
Assessment
Requests can send conversation content, submitted media, and search queries to Moonshot and incur API charges. Choose the intended endpoint region, protect your API key, and only configure custom endpoints you trust to receive that key and request data.Verification
Tags
Moonshot OpenClaw provider
Official OpenClaw provider plugin for Moonshot.
Install
openclaw plugins install @openclaw/moonshot-provider
Docs
See docs/providers/moonshot.md in the OpenClaw repository, or the published docs at https://docs.openclaw.ai/providers/moonshot.