Latest release: v2026.9.2Download zip
Compatibility
Security Scan
OpenClaw
Benign
high confidenceCredentials
The plugin can read configured Moonshot/Kimi API keys or environment variables and send user queries/media requests to Moonshot endpoints, which is expected for a provider integration and marked as sensitive where configured.
Install Mechanism
package.json declares normal OpenClaw plugin metadata and no npm install scripts, binaries, or postinstall execution.
Instruction Scope
Runtime behavior is scoped to provider registration, setup prompts, user-invoked web search, and model/media requests; no hidden agent instructions, prompt overrides, destructive commands, or unrelated behaviors were found.
Persistence & Privilege
Persistence is limited to OpenClaw plugin configuration for web search base URL/model and SDK-managed search caching; activation is not on startup and no background worker, broad local indexing, or privilege escalation was found.
Purpose & Capability
The package purpose is an OpenClaw Moonshot provider plugin, and the artifacts implement model catalog registration, Moonshot API auth, media understanding, and Kimi web search consistent with that purpose.
Assessment
Before installing, understand that using this provider sends selected model, media, and Kimi web-search requests to Moonshot/Kimi using your configured API key. Only configure custom base URLs if you trust that endpoint, because provider requests may include your API key and prompt content.Verification
Tags
Moonshot OpenClaw provider
Official OpenClaw provider plugin for Moonshot.
Install
openclaw plugins install @openclaw/moonshot-provider
Docs
See docs/providers/moonshot.md in the OpenClaw repository, or the published docs at https://docs.openclaw.ai/providers/moonshot.