← Back to Skills Marketplace
qywx-notify
by
yc-weichao
· GitHub ↗
· v1.0.0
· MIT-0
267
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install qywx-notify
Description
A skill for sending notifications via WeChat Work.
Usage Guidance
This skill appears to do exactly what it says: POST messages to a WeCom webhook you supply. Before installing: (1) keep webhook URLs secret — anyone with the URL can post messages; (2) review or remove noisy console logging in index.js if you don't want message content or masked webhook paths appearing in agent logs; (3) run npm install in a controlled environment and consider auditing or pinning the axios dependency (supply-chain risk); (4) test with a throwaway webhook first to confirm behavior; and (5) if your system aggregates logs externally, ensure logs from this skill won't leak sensitive content. If you need higher assurance, review the full index.js file locally (it is short and readable) or run it in an isolated container.
Capability Analysis
Type: OpenClaw Skill
Name: qywx-notify
Version: 1.0.0
The qywx-notify skill is a standard implementation for sending notifications to WeChat Work (WeCom) via webhooks. The code in index.js follows best practices, including parameter validation, retry logic, and sensitive data masking in logs, with no evidence of data exfiltration, unauthorized execution, or malicious prompt injection.
Capability Assessment
Purpose & Capability
Name/description (WeCom webhook notifications) align with the included files and behavior: index.js posts to a provided webhook URL and SKILL.md shows CLI and code usage. Dependencies (axios) are appropriate for HTTP calls.
Instruction Scope
SKILL.md instructions are in-scope (copy to ~/.openclaw/skills, run npm install, supply webhook URL). The code emits console logs of configuration and request payloads (it masks the webhook token path but still logs request data/content), which can expose message content or webhook tokens in local logs — consider this before using in environments where logs are collected.
Install Mechanism
No install spec in registry; SKILL.md asks the user to run npm install in the skill directory which will fetch axios from the public npm registry. This is expected for a Node skill but carries the usual npm supply-chain risks; the package.json lists only axios as a dependency.
Credentials
The skill requests no environment variables, credentials, or config paths. It only requires the webhook URL provided at runtime or via a configurable defaultWebhook — this is proportionate to the stated purpose.
Persistence & Privilege
Skill is not set to always:true and doesn't request elevated platform privileges. It stores its own configurable defaultWebhook in its config object according to SKILL.md; nothing indicates modification of other skills or global agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install qywx-notify - After installation, invoke the skill by name or use
/qywx-notify - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
qywx-notify 1.0.0 initial release:
- Send notifications to WeChat Work (WeCom) group chats via robot webhook.
- Supports text, image (Markdown format), and rich Markdown messages.
- Includes CLI and code-based invocation, with optional @all mention.
- Features robust error handling, auto retry on failure, and common usage examples.
- Provides integration guidance for Node.js and Python.
- Details security best practices and troubleshooting steps.
Metadata
Frequently Asked Questions
What is qywx-notify?
A skill for sending notifications via WeChat Work. It is an AI Agent Skill for Claude Code / OpenClaw, with 267 downloads so far.
How do I install qywx-notify?
Run "/install qywx-notify" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is qywx-notify free?
Yes, qywx-notify is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does qywx-notify support?
qywx-notify is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created qywx-notify?
It is built and maintained by yc-weichao (@yc-weichao); the current version is v1.0.0.
More Skills