wechat-channel
Warn
Audited by Snyk on Feb 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly describes a Wechaty Bridge forwarding user-generated WeChat messages to the OpenClaw Webhook (see "OpenClaw Webhook 接收器" and the "接收消息 (Webhook Payload)" examples), which the agent reads and acts on, so untrusted third‑party content from WeChat can influence agent behavior.
Audit Metadata