← Back to Skills Marketplace
chenjiahui11

Weixin WeChat Channel

by GaoBai · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
885
Downloads
6
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install weixin-wechat-channel
Description
微信公众号自动发文一站式技能。组合 内容策划 + 人性化润色 + 自动创建草稿,一条龙生成公众号文章保存到草稿箱。Use when user needs to write 公众号文章、微信公众号、create wechat public account article, auto save to draft。
Usage Guidance
This package looks like a paid "WeChat auto-draft" skill, but there are several red flags you should consider before using it: (1) The registry metadata does not list the WECHAT_APPID/WECHAT_APPSECRET the SKILL.md says are required — ask the publisher to correct metadata. (2) The included code contains only a license gate; there is no code here that actually calls WeChat APIs to create drafts — request the source or proof of the actual draft-creation implementation. (3) The license activation contacts a default IP address over plain HTTP and will send your card key and a machine fingerprint in cleartext — this is insecure. Only provide real secrets or card keys if you trust the vendor and the transport is secure (HTTPS) or you can use a self-hosted license server. (4) If you decide to test it, run it in an isolated environment and do not use real WECHAT_APPSECRET or production account credentials until you have audited the code and confirmed secure transport and the presence of legitimate WeChat API calls. (5) Ask the author for a trustworthy homepage or repository, a TLS-protected license server, and a transparent explanation of where WeChat integration is implemented; without that, treat the package as untrusted.
Capability Analysis
Type: OpenClaw Skill Name: weixin-wechat-channel Version: 1.0.2 The skill implements a remote licensing and DRM (Digital Rights Management) mechanism that requires a paid 'card key' for operation, as detailed in SKILL.md. The script scripts/license_gate.py collects hardware-specific data (MAC address, hostname, and system info) to generate a machine fingerprint, which is then transmitted to a hardcoded remote IP (120.27.202.105). While this behavior is aligned with the developer's stated commercial model, the collection of hardware identifiers and the requirement for remote 'phone-home' validation are high-risk behaviors that warrant caution.
Capability Assessment
Purpose & Capability
The SKILL.md promises end-to-end WeChat draft creation (requires WECHAT_APPID/WECHAT_APPSECRET), which is coherent for the stated purpose. However the registry metadata lists no required env vars or credentials (mismatch). The included Python code contains only a license gate and no implementation that interacts with the WeChat API or uploads media/creates drafts — so the package does not contain the core capability it claims to provide.
Instruction Scope
Runtime instructions instruct users to run the provided script to activate a license and mention using WECHAT_APPID/WECHAT_APPSECRET and IP whitelisting. The license flow prompts for a card key and will POST the key and a machine fingerprint to a remote license server. The SKILL.md does disclose '联网验证' and a default license server, but there are no runtime instructions or code in the package that actually perform the promised draft creation; the instructions give the agent or user wide discretion (rely on external 'humanizer' and other capabilities not included).
Install Mechanism
There is no installer — the skill is instruction-only and includes two Python scripts. No third-party packages are pulled during install. This is lower risk in terms of arbitrary downloads, but the bundled scripts perform network calls at runtime (license server), which introduces runtime risk.
Credentials
SKILL.md declares that WECHAT_APPID and WECHAT_APPSECRET are required; that is proportionate to the claimed WeChat-draft capability. However the registry metadata lists no required env vars (incoherent). The license code also reads TMO_LICENSE_SERVER from the environment, and the license flow collects machine identifiers and a card key and transmits them over plain HTTP to a default IP — that is sensitive and not clearly justified beyond commercial license checking.
Persistence & Privilege
always:false and disable-model-invocation default are fine. The skill writes a local license file (license/license.json) to persist activation state — expected for commercial licensing. It does not request system-wide privileges or attempt to modify other skills' config.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install weixin-wechat-channel
  3. After installation, invoke the skill by name or use /weixin-wechat-channel
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
联网验证 + 购买卡密信息
v1.0.0
功能: 一站式从主题到公众号草稿,不用分步操作 自动内容策划符合内容运营逻辑 自动去除 AI 写作痕迹,文章更像真人写的 自动处理段落空格,保证微信显示美观 自动封面上传,创建草稿 要求: 已经配置好 和WECHAT_APPIDWECHAT_APPSECRET IP 白名单已经添加正确 Python 依赖 已安装requests pillow
Metadata
Slug weixin-wechat-channel
Version 1.0.2
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 2
Frequently Asked Questions

What is Weixin WeChat Channel?

微信公众号自动发文一站式技能。组合 内容策划 + 人性化润色 + 自动创建草稿,一条龙生成公众号文章保存到草稿箱。Use when user needs to write 公众号文章、微信公众号、create wechat public account article, auto save to draft。 It is an AI Agent Skill for Claude Code / OpenClaw, with 885 downloads so far.

How do I install Weixin WeChat Channel?

Run "/install weixin-wechat-channel" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Weixin WeChat Channel free?

Yes, Weixin WeChat Channel is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Weixin WeChat Channel support?

Weixin WeChat Channel is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Weixin WeChat Channel?

It is built and maintained by GaoBai (@chenjiahui11); the current version is v1.0.2.

💬 Comments