Security audit
Zalo Personal
Security checks for vulnerabilities and agentic risk
Overview
This package is a coherent Zalo personal-account messaging plugin with sensitive but disclosed session and messaging access.
Install only if you are comfortable giving OpenClaw agent workflows access to your Zalo personal account. Review DM/group policies before enabling, prefer allowlists over open access, and understand the README warning that this unofficial automation may risk Zalo account suspension or ban.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.