OpenClaw Zalo Mod

The documented generic pass-through to roughly 141 zalo-connect actions effectively turns the skill into a natural-language wrapper over a large administrative API surface. Even with some stated safety gating, this is dangerous because it enables broad capability expansion, raises prompt-to-action abuse risk, and makes it much harder to reason about what operations the skill may perform, including potentially destructive or privacy-sensitive actions if policy checks are incomplete or bypassed.

The manifest description is entirely in Vietnamese and presents the skill as operating through natural language without indicating that language is configurable or limited by design. This can violate language/locale policy because it implicitly forces a specific language for users who may not have opted into Vietnamese-only behavior.

The skill’s documented scope expands from Zalo Mod dashboard/configuration control into broad Zalo account and group administration, including actions like renaming groups, changing group images, modifying deputies, polls, reminders, and bot profile operations. In a natural-language admin skill, this scope creep increases the chance of unintended or over-privileged actions and weakens the principle of least privilege, especially because users may not realize they are authorizing much broader account-level capabilities.