Security audit
Security checks across malware telemetry and agentic risk
Overview
This is a coherent WeChat channel plugin that stores WeChat login state and sends or receives messages as disclosed.
Install this only if you intend OpenClaw to connect to WeChat, keep WeChat bot credentials/context tokens in local OpenClaw state, poll for inbound messages, and send/upload text or media through the Weixin backend. Because it is a community-maintained replacement using the same plugin ID as other WeChat distributions, verify the publisher/source before replacing an existing installation.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
60/60 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.