← Back to Skills Marketplace
kylinr

OpenClaw WeChat Setup

by Rong · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
460
Downloads
1
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install openclaw-weixin-setup
Description
Install and connect the WeChat (微信) channel plugin for OpenClaw. Use when the user asks to set up WeChat, connect WeChat, install the WeChat plugin, scan WeC...
Usage Guidance
This skill appears to do what it says: it tells you to install a WeChat plugin for OpenClaw and to scan a QR to link an account. Before running the provided commands, consider these precautions: - Verify you have the openclaw CLI installed and working. - Inspect the npm package (https://www.npmjs.com/package/@tencent-weixin/openclaw-weixin-cli or the package's GitHub repo) before running npx, and prefer a pinned version rather than '@latest' if you want repeatability. - Be aware that npx executes code downloaded from the npm registry; run it in a trusted or isolated environment (not as root) if you have concerns. - After installation, check OpenClaw plugin settings and logs to confirm expected behavior and revoke access if unexpected activity occurs. - If you want higher assurance, obtain the plugin from an official OpenClaw or Tencent repository and validate its source code/maintainer identity before installing.
Capability Analysis
Type: OpenClaw Skill Name: openclaw-weixin-setup Version: 1.0.0 The skill bundle instructs the AI agent to execute `npx -y @tencent-weixin/openclaw-weixin-cli@latest install` in SKILL.md, which downloads and runs remote code from an unverified npm scope. This presents a significant supply chain risk, as the scope name (@tencent-weixin) mimics official branding but its legitimacy cannot be verified within the bundle. While the behavior aligns with the stated goal of installing a WeChat plugin, the use of npx for automated installation of remote artifacts is a high-risk pattern often used in supply chain attacks.
Capability Assessment
Purpose & Capability
Name, description, and runtime steps all align: the SKILL.md explains how to install and enable an OpenClaw WeChat plugin and how to log in via QR. The commands and config paths referenced (openclaw CLI, plugin enablement, gateway restart, channels login) are appropriate for this purpose.
Instruction Scope
Instructions are narrowly scoped to installing the plugin, starting the QR login flow, verifying status, and optional configuration. They do not request unrelated files, system-wide credentials, or data exfiltration. They do assume the user will run commands in a terminal and may instruct inspection of OpenClaw's config and status, which is appropriate for this task.
Install Mechanism
Installation is performed by running 'npx -y @tencent-weixin/openclaw-weixin-cli@latest install'. This is a reasonable delivery mechanism for an npm-based CLI but has supply-chain considerations: npx fetches and executes a package from the npm registry (using the latest tag), which can run arbitrary install scripts. The skill itself contains no bundled code or vetted install spec.
Credentials
The skill declares no environment variables, credentials, or config paths. The operations it requests (running openclaw commands and scanning a QR from the mobile WeChat app) match the stated purpose and do not require additional secrets or unrelated access.
Persistence & Privilege
always is false and the skill is instruction-only. It does not request persistent elevated privileges, nor does it modify other skills or system-wide agent settings. Autonomous invocation is allowed by default but not specific to this skill and does not by itself create additional privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install openclaw-weixin-setup
  3. After installation, invoke the skill by name or use /openclaw-weixin-setup
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: WeChat plugin installation and QR code connection workflow
Metadata
Slug openclaw-weixin-setup
Version 1.0.0
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is OpenClaw WeChat Setup?

Install and connect the WeChat (微信) channel plugin for OpenClaw. Use when the user asks to set up WeChat, connect WeChat, install the WeChat plugin, scan WeC... It is an AI Agent Skill for Claude Code / OpenClaw, with 460 downloads so far.

How do I install OpenClaw WeChat Setup?

Run "/install openclaw-weixin-setup" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is OpenClaw WeChat Setup free?

Yes, OpenClaw WeChat Setup is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does OpenClaw WeChat Setup support?

OpenClaw WeChat Setup is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created OpenClaw WeChat Setup?

It is built and maintained by Rong (@kylinr); the current version is v1.0.0.

💬 Comments