ClawHub
Back to skill

Security audit

Weixin Runtime Fix

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed local patch for a specific Weixin OpenClaw plugin, with no evidence of hidden data access, exfiltration, or unrelated behavior.

Install only if you use the affected Weixin plugin and need this local patch. Review install.sh first, keep the .bak backups, and be prepared to restore or reinstall the plugin if the patch does not apply cleanly.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.