ClawHub
Bundle Pluginstructural

Atomic Waha V3v3.1.1-context.12

OpenClaw Atomic WAHA v3 channel plugin — independent WhatsApp HTTP API integration

@lotfinity/atomic-waha-v3·runtime atomic-waha-v3·by @lotfinity
openclaw bundles install clawhub:@lotfinity/atomic-waha-v3
Latest release: v3.1.1-context.12Download zip

Capabilities

Bundle format
generic
Tags
bundle-onlyformat:genericartifact:legacy-zip
Runtime ID
atomic-waha-v3

Compatibility

Built With Open Claw Version
2026.5.12
Min Gateway Version
2026.5.12
Plugin Api Range
>=2026.5.12
Plugin Sdk Version
2026.5.12
Security Scan
VirusTotalVirusTotal
stale
View report →
OpenClawOpenClaw
Benign
low confidence
✓
Purpose & Capability
No supplied artifact evidence was available showing a purpose mismatch or unsafe capability.
✓
Instruction Scope
No supplied artifact evidence was available showing hidden instructions, goal hijacking, or unsafe default behavior.
✓
Install Mechanism
No supplied artifact evidence was available showing risky install behavior, remote execution, or provenance concerns.
✓
Credentials
No supplied artifact evidence was available showing disproportionate file, network, credential, or system access.
✓
Persistence & Privilege
No supplied artifact evidence was available showing persistence, privilege escalation, or background activity.
Assessment
Treat this as an incomplete review result: VirusTotal telemetry alone is stale and not enough to justify a hold, but the artifact files should be inspected successfully before installation.
✗
scripts/install-openclaw-extension.mjs:143
Shell command execution detected (child_process).
✗
bin/atomic_waha_v3_cli.py:954
File appears to expose a hardcoded API secret or token.
✗
dist/src/client.js:442
File appears to expose a hardcoded API secret or token.
✗
src/client.ts:698
File appears to expose a hardcoded API secret or token.
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Verification

Tier
structural
Scope
artifact only
Summary
Validated package structure and extracted metadata.
Scan status
clean

Tags

latest
3.1.1-context.12

@lofa199419/atomic-waha-v3

OpenClaw Atomic WAHA v3 channel plugin with a packaged local CLI wrapper for WAHA session and messaging operations.

What ships

  • OpenClaw plugin files: index.ts, src/, openclaw.plugin.json
  • Skill docs: skills/atomic-waha-v3/SKILL.md
  • Local CLI wrappers:
    • bin/atomic-waha-v3-cli
    • bin/wa
    • bin/wa-adv
    • bin/atomic-waha-v3-advanced-entrypoint
    • bin/atomic_waha_v3_cli.py

Install into an OpenClaw state dir

npm install @lofa199419/atomic-waha-v3
node node_modules/@lofa199419/atomic-waha-v3/scripts/install-openclaw-extension.mjs --state-dir /data/.openclaw --force

Or with OPENCLAW_STATE_DIR:

OPENCLAW_STATE_DIR=/data/.openclaw node node_modules/@lofa199419/atomic-waha-v3/scripts/install-openclaw-extension.mjs --force

Runtime configuration

The plugin package does not ship secrets. Provide WAHA configuration through your container or startup flow and render:

/data/.openclaw/extensions/atomic-waha-v3/bin/.env

Expected values:

WAHA_URL=https://your-waha-host
WAHA_API_KEY=your-api-key
WAHA_SESSION_DEFAULT=power

Publish checklist

npm pack --dry-run
npm publish --access public