Security audit
Twilio WhatsApp Channel
Security checks across malware telemetry and agentic risk
Overview
This is a coherent Twilio WhatsApp channel plugin with expected network, credential, webhook, and media-file behavior for its stated purpose.
Install only if you are comfortable giving this community plugin Twilio credentials and exposing an HTTPS webhook to your OpenClaw gateway. Prefer allowlist mode, restrict allowed phone numbers, treat logs as sensitive when diagnostics are enabled, and remember that WhatsApp media may be stored persistently in the OpenClaw state directory.
VirusTotal
66/66 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.