Latest release: v2026.7.1Download zip
Compatibility
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Artifacts coherently describe an official OpenClaw WhatsApp channel plugin; sending messages, monitoring configured chats, read receipts, media handling, calls, and history/search helpers are aligned with that purpose.
Instruction Scope
Runtime and skill instructions include user-directed controls such as pairing/allowlist policies, explicit recipient and message requirements for wacli sends, and confirmation before third-party WhatsApp messages.
Install Mechanism
The package has no install scripts or executable payloads, but it depends on WhatsApp-related libraries and offers optional third-party CLI installs for wacli and MeowCaller features.
Credentials
Network use, local media reads, and WhatsApp Web session access are proportionate for a WhatsApp channel, but users should expect private chat content to be processed by OpenClaw when chats are enabled.
Persistence & Privilege
The plugin persists WhatsApp Web credentials under OpenClaw-managed auth storage, supports auth directory overrides, and the wacli helper uses its own ~/.wacli store; cleanup code includes safeguards around managed credential paths.
Scan Findings in Context
[SkillSpector clean] expected: SkillSpector reported no issues; artifact review found the high-impact behaviors are disclosed and purpose-aligned.
[VirusTotal clean] expected: VirusTotal telemetry showed no malicious or suspicious detections across supplied engines.
[Manual artifact review: messaging and auth state] expected: The inspected code reads/writes WhatsApp auth state, opens WhatsApp Web sessions, sends messages/media/reactions/polls, and can expose an opt-in requester-bound call tool, all consistent with the plugin description and configuration schema.
Assessment
Install only if you are comfortable linking a WhatsApp account to OpenClaw. Prefer pairing or allowlist policies, review read-receipt and plugin-hook settings, and use a dedicated number for automation when possible. Treat optional wacli and MeowCaller setup as separate linked-device sessions that can send messages or calls, so confirm recipients and messages carefully.Verification
Tags
OpenClaw WhatsApp
Official OpenClaw channel plugin for WhatsApp Web chats.
Install from OpenClaw:
openclaw plugin add @openclaw/whatsapp
Link a WhatsApp account through the plugin's setup flow, then configure which chats OpenClaw agents should monitor and reply to.