Openclaw Googlechat 2026.5.12 Beta.6.Tgz

Prompt-injection indicators were detected in the submitted artifacts (system-prompt-override); human review is required before treating this skill as clean.

Install this only if you want OpenClaw connected to Google Chat. Use least-privilege Google service-account credentials, keep secrets out of plaintext config, restrict allowed senders/spaces, and verify the reported static 'bearer' finding is not an actual hardcoded token before trusting the package in production. ClawScan detected prompt-injection indicators (system-prompt-override), so this skill requires review even though the model response was benign.