Openclaw Zalo 2026.5.12 Beta.6.Tgz
PassAudited by ClawScan on May 10, 2026.
Overview
The visible files look like a real Zalo channel plugin, with no unrelated cloud credentials or unexpected services requested.
Install this only if you intend to connect OpenClaw to Zalo. Review the Zalo bot token, webhook secret, proxy, tokenFile, dmPolicy, allowFrom, and groupPolicy settings before use, because they control who can message the bot and where traffic is routed. I did not see unrelated credential access or unexpected endpoints in the visible code, but confidence is medium because some listed files were truncated or omitted from the provided artifact text.
