openclaw-whatsapp-gif

• Analyzed: May 12, 2026, 4:21 AM
• Findings: 1
• Version: 1.0.1
• Hash: de250380883068c506c937917022d27a5484281ff940e7bedec9ac3c19da3b30
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw WhatsApp GIF skill is classified as benign. It demonstrates robust security practices, including strict host whitelisting for all network requests and media downloads (enforced by `is_allowed_host` and `allowedMediaHosts` in `policy.json`), content filtering for search results, and validation of downloaded media size and type. Risky features like web scraping (`search_tenor_web` in `scripts/find_gif.py`) and remote URL fallback are disabled by default in `references/policy.json`. There is no evidence of intentional data exfiltration, persistence mechanisms, or prompt injection attempts in `SKILL.md`.