openclaw-wechat-integration

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The stated WeChat integration purpose matches messaging/webhook capabilities, but the trust and data-flow model is weak. A third-party plugin from a non-official publisher, inconsistent provenance, and required routing through a custom proxy create elevated credential-forwarding and interception risk that is not well-justified by the skill.

Confidence: 89%Severity: 81%
Audit Metadata
Analyzed At
Sep 12, 2026, 06:51 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fhermes-skills%2Fopenclaw-wechat-integration%2F@3a213899c90e6bce900387a3cb72054e0c8acb51fb6d10f5b7cab0415636058b
Security Audit — socket — openclaw-wechat-integration