Security audit
Yach IM Full
Security checks for vulnerabilities and agentic risk
Overview
This is a broad Yach IM enterprise chat plugin with sensitive but disclosed messaging, mail, document, group, and attendance capabilities.
Install only if you intend this OpenClaw instance to access your Yach IM account and related enterprise services. Keep the default allowlist/pairing policies unless you need broader access, enable only the tool packs you actually use, and review each write approval carefully because some actions can send messages, change groups, affect mail, edit documents, or perform attendance operations.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.