← Back to Skills Marketplace
aw11100

wechat_messaging

by aw11100 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
391
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install wechatmessaging
Description
通过微信查询好友并确认后,向指定好友发送文本消息,支持多好友选择和发送确认流程。
Usage Guidance
Do not install blindly. Verify with the author or maintainer: (1) why the registry lists no required env vars while SKILL.md uses WECHAT_APPID; ask them to declare and document required credentials rather than embedding them; (2) confirm the intended API base URL — the file currently points at 192.168.29.1 (an internal IP) which could cause the agent to talk to an untrusted local service; replace with a trusted HTTPS domain; (3) never use the skill with sensitive messages until you trust the endpoint and credential handling; (4) ask for code or an audited implementation if you need to run this in production. Because the skill will transmit message content and contact identifiers to the configured endpoint, treat the endpoint and credentials as sensitive and validate them out-of-band before use.
Capability Analysis
Type: OpenClaw Skill Name: wechatmessaging Version: 1.0.0 The skill bundle provides a standard interface for sending WeChat messages through a local or private API endpoint (192.168.29.1:8080). The instructions in SKILL.md enforce a safe operational flow by requiring the agent to query for a friend and obtain user confirmation before sending any content. While it contains a hardcoded WECHAT_APPID, there is no evidence of malicious intent, data exfiltration, or unauthorized command execution.
Capability Assessment
Purpose & Capability
The stated purpose (query contacts and send WeChat text messages) aligns with the described API calls (queryFriend, sendText). However the registry metadata declares no required environment variables while SKILL.md uses WECHAT_APPID (and even provides a concrete value). That mismatch is incoherent and should be resolved.
Instruction Scope
Instructions direct the agent to call an external endpoint (base URL set to https://192.168.29.1:8080) and to use an appid value embedded in the SKILL.md. The flow itself (query then confirm then send) is scoped to messaging, but the hardcoded appid and the use of an IP-address endpoint (likely an internal host) are risky: the agent will send user-supplied message content and contact identifiers to that endpoint. There are no directives to authenticate beyond the appid, and no safeguards about what data to transmit.
Install Mechanism
Instruction-only skill with no install spec or code files. This minimizes disk write/execution risk; no installers or external packages are pulled.
Credentials
The registry advertised no required env vars, yet SKILL.md references WECHAT_APPID (and populates it with a concrete value). Hardcoding what appears to be an application credential in SKILL.md is inappropriate for a public skill and suggests either sloppy packaging or unintended exposure of a secret. The endpoint also implies the skill expects a reachable service that is not declared.
Persistence & Privilege
Skill does not request always:true and is user-invocable only. It does not claim to modify other skills or system settings. Autonomous invocation is permitted (platform default) but there are no extra persistence privileges requested.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install wechatmessaging
  3. After installation, invoke the skill by name or use /wechatmessaging
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of wechat_messaging skill. - Allows sending messages to WeChat friends via API. - Workflow: search for friend → confirm recipient → send message. - Supports querying friends by name and sending text to selected contact. - Enforces confirmation step before sending messages.
Metadata
Slug wechatmessaging
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is wechat_messaging?

通过微信查询好友并确认后,向指定好友发送文本消息,支持多好友选择和发送确认流程。 It is an AI Agent Skill for Claude Code / OpenClaw, with 391 downloads so far.

How do I install wechat_messaging?

Run "/install wechatmessaging" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is wechat_messaging free?

Yes, wechat_messaging is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does wechat_messaging support?

wechat_messaging is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created wechat_messaging?

It is built and maintained by aw11100 (@aw11100); the current version is v1.0.0.

💬 Comments