Rank#1412
Security Findings
3No tagged releases
SuspiciousLineageRepo ships no git tags and no GitHub releases — consumers cannot pin to stable, reviewable versions
Package registry name mismatch
SuspiciousLineagenpm name '@kapso/openclaw-whatsapp' != repo 'openclaw-plugin'
Install script executes on package install
SuspiciousScannerpackage.json postinstall runs on install: node scripts/patch-openclaw-hono.mjs
package.json
Contents
1 skill bundled by this extension
1 no risk known
kapso-whatsapp-setup
skill
None known
skills/kapso-whatsapp-setup2bab821ce28b…
Editions
1- 0.1.4Scanned Aug 4, 2026, 03:33 PMLow