Manifest
    by Manifold
    Back to Results
    2026.7.1

    @openclaw/qqbot

    OpenClaw QQ Bot channel plugin for group and direct-message workflows.

    bundle-plugin
    Rank#1819
    openclawclawhub8Last scanned Aug 4, 2026, 03:33 PMhttps://github.com/openclaw/openclaw

    Security Findings

    3

    pull_request_target with secrets

    MaliciousLineage

    [.github/workflows/auto-response.yml] pull_request_target with secrets

    Unpinned dependencies

    SuspiciousLineage

    2 unpinned: @openclaw/ai, @openclaw/session-url-contract

    Workflow makes outbound network call

    SuspiciousLineage

    [.github/workflows/mantis-slack-desktop-smoke.yml] curl -fsS --connect-timeout 5 --max-time 15 https://checkip.amazonaws.com

    Contents

    3 skills bundled by this extension

    3 no risk known

    qqbot-channel

    skill

    None known
    skills/qqbot-channel97e5330e1856…

    qqbot-media

    skill

    None known
    skills/qqbot-media248a931ac3c5…

    qqbot-remind

    skill

    None known
    skills/qqbot-remind49e515b2f427…

    Editions

    1
    • 2026.7.1
      Scanned Aug 4, 2026, 03:33 PMMedium