Openclaw Zalouser 2026.5.12 Beta.6.Tgz

PassAudited by ClawScan on May 7, 2026.

Overview

This appears to be a real OpenClaw Zalo personal-account messaging plugin, with capabilities that match its description, but it will let the agent send messages through your Zalo account after QR login.

Only install this if you are comfortable connecting an unofficial automation tool to your personal Zalo account. After QR login, the agent may be able to list friends/groups and send Zalo messages according to your OpenClaw channel policies. The skill itself discloses the risk of Zalo account suspension. Because several source files were truncated or omitted in the provided data, confidence is medium rather than high; reviewing the bundled zca-js integration would increase assurance.