← Back to Skills Marketplace
348
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install openclaw-wechat-mail-bridge-windows
Description
Install, configure, run, and troubleshoot a Windows WeChat desktop automation and BHMailer/OpenClaw mail bridge bundle, including File Transfer Assistant wor...
Usage Guidance
This bundle appears to be what it says: a Windows WeChat desktop automation + BHMailer/OpenClaw bridge. Before installing, do the following: 1) Do not run with defaults — change BRIDGE_SHARED_SECRET from 'dev-bridge-secret' and do not bind the service to 0.0.0.0 on a public network unless you have a firewall and proper access controls. 2) Provide BHMAILER credentials only if you trust the provider and understand where mail data flows. 3) The Windows sidecar uses UI automation (pywinauto/uiautomation) and will interact with the logged-in WeChat client; run it only on a machine/account you dedicate to this purpose because it can read/send messages. 4) Confirm the apparent mismatch: SKILL.md mentions top-level .bat entrypoints but the bundle mostly contains bash scripts under bundle/plugin/scripts — verify which scripts you must run on Windows. 5) Review the bundled code (especially auth and any webhook handlers) and replace default secrets before exposing the service. If you want extra assurance, run the plugin and sidecar on an isolated network or VM and perform the provided smoke tests locally first.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-wechat-mail-bridge-windows
Version: 0.1.2
The bundle is a legitimate automation tool designed to bridge Windows WeChat Desktop with a mail query service (BHMailer). It uses UI automation (pywinauto/uiautomation) and an optional visual fallback (OCR/VLM via uiautomation_adapter.py) to monitor and interact with WeChat messages. The security implementation is notably robust for a skill bundle, featuring HMAC-SHA256 request signing, nonce-based replay protection, and Bearer token authentication (auth.ts). It also includes explicit privacy controls to redact emails and WeChat text in logs (config/schema.ts). No evidence of malicious intent, unauthorized data exfiltration, or prompt injection was found; all high-privilege operations are transparently documented and aligned with the stated purpose.
Capability Assessment
Purpose & Capability
The code and SKILL.md implement a plugin and a Windows sidecar that automate WeChat desktop and bridge BHMailer mail events to OpenClaw. Requested configuration (BHMAILER_*, BRIDGE_SHARED_SECRET, sqlite path, etc.) matches that purpose. There is no unexpected request for unrelated cloud credentials or distant services.
Instruction Scope
Runtime instructions in SKILL.md stay on-topic: they point operators to the bundle's install, config, and operations docs and tell operators to run the bundled scripts or inspect source. However, SKILL.md suggests using top-level scripts/*.bat for Windows setup while the shipped scripts in the bundle appear to be shell (bash) and plugin-side scripts; verify whether Windows-specific .bat entry points are actually present in the copy you install. Also the runtime expects editing environment/config files and running networked services — follow the docs and do not accept defaults blindly.
Install Mechanism
There is no remote download/install mechanism embedded in the SKILL.md; the bundle contains Node and Python source, package.json/package-lock and example configs. Dependencies are typical (fastify, better-sqlite3, zod) and come from npm; no suspicious external URLs or archive extraction steps found in the manifest.
Credentials
The bundle uses environment variables expected for this function (BRIDGE_SHARED_SECRET, BHMAILER_UID, BHMAILER_SIGN, BHMAILER_WEBHOOK_SECRET, SQLITE_PATH, etc.). This is proportional. Two operational cautions: defaults include an insecure shared secret ('dev-bridge-secret') and a default listen host of 0.0.0.0 — these are convenient for testing but dangerous in production if left unchanged. The skill does not request unrelated secrets.
Persistence & Privilege
The skill does not request forced/always-on privileges and registry flags show always:false and normal agent invocation. The bundle runs as a local service and a Windows sidecar that automates a desktop UI — that requires local user privileges which are appropriate for the declared functionality but should be limited to a dedicated/isolated host.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-wechat-mail-bridge-windows - After installation, invoke the skill by name or use
/openclaw-wechat-mail-bridge-windows - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.2
Optimize ClawHub icon and metadata for better searchability around OpenClaw, WeChat desktop automation, BHMailer, and Windows sidecar workflows.
v0.1.1
Refine the ClawHub package layout and add mirrored release notes for the Windows/OpenClaw bundle.
v0.1.0
Initial ClawHub release for the Windows/OpenClaw WeChat-to-mail bridge bundle.
Metadata
Frequently Asked Questions
What is WeChat Mail Bridge (Windows/OpenClaw)?
Install, configure, run, and troubleshoot a Windows WeChat desktop automation and BHMailer/OpenClaw mail bridge bundle, including File Transfer Assistant wor... It is an AI Agent Skill for Claude Code / OpenClaw, with 348 downloads so far.
How do I install WeChat Mail Bridge (Windows/OpenClaw)?
Run "/install openclaw-wechat-mail-bridge-windows" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is WeChat Mail Bridge (Windows/OpenClaw) free?
Yes, WeChat Mail Bridge (Windows/OpenClaw) is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does WeChat Mail Bridge (Windows/OpenClaw) support?
WeChat Mail Bridge (Windows/OpenClaw) is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created WeChat Mail Bridge (Windows/OpenClaw)?
It is built and maintained by YJLi-new (@yjli-new); the current version is v0.1.2.
More Skills