wacli
Send third-party WhatsApp messages or sync/search WhatsApp history via wacli, not normal active chats.
RiskMedium
Lineage38
Safety100
Rank#1796
Security Findings
Unpinned dependencies
1 unpinned: @openclaw/ai
Package registry name mismatch
npm name 'openclaw' != repo 'clawdis'
Workflow makes outbound network call
[.github/workflows/mantis-slack-desktop-smoke.yml] curl -fsS --connect-timeout 5 --max-time 15 https://checkip.amazonaws.com
pull_request_target with secrets
[.github/workflows/auto-response.yml] pull_request_target with secrets
Flagged by the hosting marketplace
the skills.sh security audit flagged this skill (status=warn, risk=medium) — flagged by Snyk,Runlayer
Versions
3- Scanned Jul 9, 2026, 08:14 AMMedium
- Scanned Apr 28, 2026, 04:52 PMUnknown
- Scanned Apr 7, 2026, 02:08 PMUnknown