Latest release: v2026.7.1Download zip
Compatibility
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The package purpose is a QQ Bot channel plugin for group and direct-message workflows, and the artifacts implement QQ messaging, media handling, reminders, and QQ Open Platform channel-management tools consistent with that purpose.
Instruction Scope
The bundled skills repeatedly scope use to explicit QQ Bot requests, require confirmation for write/delete and bulk-delete operations, and warn agents not to expose or forward private attachment paths unnecessarily.
Install Mechanism
The package is an official @openclaw plugin with source-linked metadata, pinned npm dependencies, no package lifecycle install scripts found, and a standard OpenClaw plugin manifest.
Credentials
The plugin needs QQ app credentials, network access to QQ services, WebSocket connectivity, media file access within OpenClaw/QQBot media roots, and optional STT configuration; these are proportionate for a channel integration.
Persistence & Privilege
When configured, it may maintain runtime connection state, create Gateway cron reminder jobs, store media under OpenClaw media directories, and keep a local credential backup for recovery; these behaviors are purpose-aligned but worth understanding before use.
Scan Findings in Context
[SkillSpector:no_issues] expected: SkillSpector reported no issues across the three bundled skills; artifact review found the skill instructions are consistent with the plugin tools.
[VirusTotal:clean] expected: VirusTotal telemetry showed 0 malicious and 0 suspicious detections across 59 engines; this supports but does not determine the verdict.
[artifact:broad_authenticated_channel_api] expected: The qqbot_channel_api tool is a broad authenticated proxy to QQ Open Platform endpoints and can modify public QQ channel resources, but it is scoped to the QQ API host, validates paths, and enforces confirmation flags for DELETE and bulk announcement deletion.
[artifact:credential_and_state_storage] expected: The plugin reads QQ credentials from config, env, file, or structured secret references and stores a local credential backup for recovery, which matches the integration purpose and is not evidence of exfiltration.
Assessment
Install only for bots you intend to connect to QQ, use scoped QQ Bot permissions, keep client secrets in OpenClaw secret/env mechanisms, restrict allowFrom/groupAllowFrom for sensitive deployments, and review any agent-requested channel write or delete action before approving it.Verification
Tags
OpenClaw QQ Bot
Official OpenClaw channel plugin for QQ Bot group and direct-message workflows.
Install from OpenClaw:
openclaw plugin add @openclaw/qqbot
Configure QQ Bot credentials in OpenClaw, then connect the bot to the groups or direct-message contexts where agents should operate.