Latest release: v2026.9.2Download zip
Compatibility
Security Scan
OpenClaw
Benign
high confidenceCredentials
Network access is directed to Microsoft Teams, Bot Framework, Microsoft Graph, OAuth endpoints, and configured media hosts; service URLs and media fetches use allowlists, HTTPS checks, timeouts, and SSRF guard helpers.
Install Mechanism
The install metadata points to npm package @openclaw/msteams, has no package scripts or postinstall behavior, and activation is not on startup unless the channel is configured and started by OpenClaw.
Instruction Scope
The plugin exposes sensitive Teams actions such as message delete/edit, read/search, pin/unpin, reactions, file upload, and add/remove/rename group operations, but the code includes target authorization, allowlist/group policy checks, mention gating, and owner/operator-admin checks for group management.
Persistence & Privilege
The runtime persists expected channel state including conversation references, polls/votes, SSO tokens, and delegated OAuth tokens in OpenClaw plugin state with entry limits and migration support; users should treat this as sensitive Teams account state.
Purpose & Capability
The package declares @openclaw/msteams, describes itself as a Microsoft Teams channel plugin for bot conversations, and its bundled runtime implements Teams messaging, webhook handling, approvals, Graph lookups, media handling, polls, and optional group-management actions that fit that purpose.
Assessment
Install only if you intend to connect OpenClaw agents to Microsoft Teams. Review the Teams app permissions, keep dmPolicy/groupPolicy and allowlists restrictive, and enable delegatedAuth or SSO only when you are comfortable storing user-scoped Teams tokens in OpenClaw plugin state.dist/adapter.runtime-DDuc7sKJ.cjs:241
File appears to expose a hardcoded API secret or token.
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.Verification
Tags
OpenClaw Microsoft Teams
Official OpenClaw channel plugin for Microsoft Teams bot conversations.
Install from OpenClaw:
openclaw plugins install @openclaw/msteams
Configure the Teams bot credentials and trusted service URLs in OpenClaw, then connect the bot to the teams or chats where agents should operate.