by 安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
Before installing, ask the author to: (1) explicitly declare any additional required env vars or credentials (e.g., BUSINESS_EMAIL, outbound channel tokens for Telegram/owner messaging), (2) add ~/.openclaw/openclaw.json to the skill's declared required config paths or change the design to use a clearly scoped config location, (3) describe exactly how escalation messages are delivered (which service, which credentials are used), (4) confirm retention and privacy of forwarded customer conversatio...详细分析 ▾
ℹ 用途与能力
The required env vars (WABA_PHONE_NUMBER_ID, WABA_ACCESS_TOKEN) are appropriate for a WhatsApp Business API responder. However, the SKILL.md instructs reading/writing a business profile at ~/.openclaw/openclaw.json even though no config path is declared in the manifest — that's a mismatch between the manifest and instructions.
⚠ 指令范围
Instructions tell the agent to read a home-directory config (~/.openclaw/openclaw.json), detect language, classify messages, store tickets in agent memory, and forward full conversations to the owner via an "OpenClaw messaging channel (WhatsApp/Telegram)". The forwarding/delivery mechanism and an email address (BUSINESS_EMAIL) are referenced but no outbound-channel credentials or BUSINESS_EMAIL env var are declared. The instructions therefore require access and actions beyond what's declared and grant broad discretion to forward user data.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files—no artifacts will be written to disk by an installer. That reduces install-time risk.
⚠ 凭证需求
The declared envs (WABA_PHONE_NUMBER_ID, WABA_ACCESS_TOKEN) are proportional. But the SKILL.md references additional configuration items (BUSINESS_EMAIL, OpenClaw/Telegram outbound channel/auth) and a local config path that are not declared as required. Missing declarations make it unclear what secrets or tokens the skill will actually need at runtime.
ℹ 持久化与权限
The skill stores ticket state in agent memory and will forward messages to the owner; 'always' is false and autonomous invocation is default. Storing customer conversations in memory and forwarding them is expected for escalation but is sensitive behavior the owner should explicitly approve. The skill does not request system-wide privileges or modify other skills.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/28
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install whatsapp-biz-responder
镜像加速npx clawhub@latest install whatsapp-biz-responder --registry https://cn.longxiaskill.com