Wechat Publisher

• Analyzed: May 12, 2026, 3:27 AM
• Findings: 1
• Version: 0.1.0
• Hash: 1ae2865ec03439753bcaecab28cef0331b0414631eb13698ee1f5f6fa8b84cb1
• Source: palm
• External report: View on VirusTotal

Findings (1)

OpenClaw Agent Skill Suspicious High-Entropy/Eval files: 2 The skill is designed to publish Markdown to WeChat using `wenyan-cli`. It correctly installs the `wenyan-cli` dependency via `npm install -g` and loads WeChat API credentials (`WECHAT_APP_ID`, `WECHAT_APP_SECRET`) from the OpenClaw-designated `$HOME/.openclaw/workspace/TOOLS.md` file. All actions, including file access and network calls (e.g., `curl` for IP checks), are directly aligned with its stated purpose of publishing content and troubleshooting. There is no evidence of intentional harmful behavior such as unauthorized data exfiltration, persistence mechanisms, or malicious prompt injection attempts against the agent.