What's app

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

If used carelessly, the agent could send a real message or file to the wrong WhatsApp contact or group.

Why it was flagged

The skill can invoke a tool that sends WhatsApp messages, but it also explicitly requires recipient/message confirmation before sending.

Skill content

Safety
- Require explicit recipient + message text.
- Confirm recipient + message before sending.

Recommendation

Only allow sends after reviewing the exact recipient, message text, and any attachment path.

NoteHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

The CLI may act as the authenticated WhatsApp user, including sending messages and accessing synced chats.

Why it was flagged

QR login delegates access to the user's WhatsApp account, which is expected for the skill but is sensitive account authority.

Skill content

`wacli auth` (QR login + initial sync)

Recommendation

Authenticate only if you trust the wacli installation, and revoke or remove the local session if you no longer need the skill.

NoteHigh Confidence

ASI06: Memory and Context Poisoning

What this means

Private WhatsApp history may be stored and later searched locally by the agent when you request it.

Why it was flagged

The skill can continuously sync WhatsApp history into a persistent local store, which may contain private chat content.

Skill content

`wacli sync --follow` (continuous sync)
... Store dir: `~/.wacli` (override with `--store`).

Recommendation

Use the narrowest practical chat/date scope, consider a dedicated `--store` location, and clean up stored history when no longer needed.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

The reviewed skill file is small, but the actual behavior depends on the external wacli binary you install.

Why it was flagged

The skill relies on an external CLI installed from upstream sources, with the Go install using the moving @latest version.

Skill content

brew formula: steipete/tap/wacli ... go module: github.com/steipete/wacli/cmd/wacli@latest

Recommendation

Install wacli only from a trusted source, prefer a pinned/versioned install when possible, and review the upstream project before authenticating WhatsApp.