WeCom Connect

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:26 PM UTC
• Version:
  1.0.0

Overview

This skill appears to do what it claims: help connect Enterprise WeChat to OpenClaw, while storing the resulting bot credentials locally.

Install only if you intend to bind Enterprise WeChat to OpenClaw. Treat ~/.openclaw/openclaw.json as sensitive because it will contain a bot secret, and expect the OpenClaw gateway to restart after setup.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill instructs the agent to persist sensitive WeCom bot credentials (`botId` and `secret`) into a local config file and restart the gateway, but it provides no user-facing consent step, no warning about credential storage, and no guidance on protecting the file. This is dangerous because it causes a security-sensitive system change and secret persistence on the host, increasing the risk of accidental exposure, misuse by other local processes, or unexpected service disruption from the restart.

VirusTotal

66/66 vendors flagged this skill as clean.