WhatsApp Chats

• Analyzed: May 12, 2026, 4:19 AM
• Findings: 1
• Version: 1.0.0
• Hash: 1d11850727ccc567e3034b1fe90d091aa68cc838f0133316f051345d053bcfd8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill 'whatsapp-chats' is designed to list, search, and analyze WhatsApp conversations from the local Baileys session cache. The `scripts/chats.js` file accesses files within the `OPENCLAW_STATE_DIR/credentials/whatsapp/default` directory, which is consistent with its stated purpose. It performs read-only operations on these files (session data, sender keys, contacts.json) and outputs structured JSON. There is no evidence of data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts in SKILL.md. Argument handling in the Node.js script is safe, preventing shell injection. The behavior is fully aligned with the skill's description.