Security audit
Zalo
Security checks across malware telemetry and agentic risk
Overview
This is a coherent official Zalo channel plugin that connects OpenClaw to Zalo bot and webhook messaging.
Install this only if you intend to connect an OpenClaw agent to Zalo. Protect the bot token and webhook secret, prefer env/secret-manager configuration, verify any custom proxy or ZALO_API_URL setting, and keep dmPolicy/groupPolicy restrictive unless you want broader inbound message access.
VirusTotal
59/59 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.