Huo15 Wecom Plugin

• Analyzed: May 11, 2026, 2:01 AM
• Findings: 1
• Version: 2.9.5
• Hash: 9cc779591c72675fd11407da8a257fb801d867b147d5dc267ae29ad37f401e62
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a comprehensive Enterprise WeChat (WeCom) integration for OpenClaw. It implements complex features including multi-account management, WebSocket-based bot communication, and dynamic agent derivation (automatically creating isolated workspaces for different users/groups). While the plugin performs sensitive operations such as modifying the local 'openclaw.json' configuration (in 'src/dynamic-agent.ts') and managing file uploads/downloads, these actions are well-documented and strictly aligned with the plugin's stated purpose of providing enterprise-grade session isolation and media handling. No evidence of malicious intent, data exfiltration, or unauthorized execution was found.