Please use the latest released version of @propersama/openclaw-napcat and a compatible, up-to-date OpenClaw installation. When reporting an issue, include the exact plugin and OpenClaw versions. Older versions may require an upgrade; no backport or response-time commitment is made here.

Please report suspected security vulnerabilities privately to propersama@qq.com.

Do not publish vulnerability details in public issues, pull requests, or discussions before coordinated disclosure. Include a description of the issue, affected versions, potential impact, and minimal reproduction steps when available.

Remove real credentials, QQ message contents, personal information, and other sensitive data from examples and logs. Use synthetic test data instead. Never send production tokens or signing secrets.

For ordinary bugs without security impact, use the repository's GitHub issues.