Security audit
Zalo Personal
Security checks for vulnerabilities and agentic risk
Overview
This package is a disclosed Zalo Personal Account messaging plugin, with sensitive account access that matches its stated purpose.
Install only if you want an agent connected to your personal Zalo account. Keep DM access on pairing or allowlist unless you intentionally want open access, review group allowlists carefully, and remember the README warns this unofficial automation may risk Zalo account suspension.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.