Security audit
Security checks for vulnerabilities and agentic risk
Overview
This is a disclosed WeChat channel plugin whose sensitive network, messaging, and credential storage behavior matches its stated purpose.
Install only if you intend this OpenClaw instance to connect to WeChat. Treat the saved state directory as sensitive because it contains bot credentials and conversation context tokens, and be careful when asking the agent to send local files or scheduled messages through this channel.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.