← Back to Skills Marketplace
7527
Downloads
19
Stars
24
Active Installs
5
Versions
Install in OpenClaw
/install wechat
Description
Install OpenClaw's official WeChat plugin and complete account pairing via QR code scan. Triggers when the user says "install WeChat plugin", "connect WeChat...
Usage Guidance
Install only if you trust this publisher and the Tencent WeChat npm package. Prefer a pinned installer, run it on a trusted machine/network, review the generated account files and OpenClaw channel allowlist after pairing, close the local server when done, and know how to revoke or delete the stored WeChat token.
Capability Analysis
Type: OpenClaw Skill
Name: wechat
Version: 2.1.0
The skill automates the installation of a WeChat plugin by executing remote code via 'npx -y @tencent-weixin/openclaw-weixin-cli@latest install' and starting a local HTTP server on port 8765 to facilitate a QR code login flow. While these actions are consistent with the stated purpose, the combination of remote package execution, local service hosting, and explicit instructions in SKILL.md to ignore security warnings regarding 'dangerous code patterns' (environment variable access and network communication) presents a significant security risk. The script also modifies local configuration files and restarts the OpenClaw gateway, which are high-privilege operations.
Capability Assessment
Purpose & Capability
Installing a WeChat plugin, showing a QR-code pairing page, polling WeChat status, saving the paired account, and enabling the OpenClaw WeChat channel are coherent with the stated purpose.
Instruction Scope
The documentation discloses many side effects, but the trigger language is broad, there is no clear consent boundary before installation/config changes, and it tells users a dangerous-code warning can be ignored for plugin code not present in the reviewed artifact.
Install Mechanism
If the plugin is missing, the script automatically runs an unpinned remote npm installer via `npx -y @tencent-weixin/openclaw-weixin-cli@latest install`, giving changing external code installation authority.
Credentials
The local HTTP server listens on port 8765 without an explicit localhost bind, uses wildcard CORS for `/status`, serves broadly from `/tmp`, and the status file can include QR/login identifiers and bot token after confirmation.
Persistence & Privilege
The skill writes the WeChat bot token to local account JSON files, updates OpenClaw channel allowlists, and starts a detached gateway restart; these are purpose-related but high-impact and not tightly contained.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install wechat - After installation, invoke the skill by name or use
/wechat - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.1.0
Wechat Connect 2.1.0 introduces automated plugin installation for a smoother user experience.
- The skill now automatically installs the @tencent-weixin/openclaw-weixin plugin if it is not already present; manual terminal steps are no longer required.
- Updated documentation to reflect the new auto-installation process and adjusted dependency installation notes.
- No code changes detected in this release.
v2.0.2
- Gateway now automatically restarts after account connection—no manual action required.
- Success popup remains visible; you can use WeChat immediately after the restart.
- Minor documentation updates and process clarifications.
v2.0.1
Major update: Skill reworked from local data reading to guided WeChat plugin installation and pairing.
- New function: Guides users to install and connect the official OpenClaw WeChat plugin via QR code, with no command-line steps required.
- Added visual step-by-step instructions (assets/001.png–004.png) shown through a local HTTP interface.
- Automated QR code retrieval, state polling, and account configuration.
- Includes browser-based user guidance, real-time feedback, and automatic account saving.
- Old script and documentation for local SQLite reading removed.
v1.0.2
WeChat Local Data Reader - Initial Release
- Allows read-only access to local WeChat data via SQLite.
- List contacts, chat sessions, search messages, and view favorites.
- Supports macOS (auto path) and Windows (custom path).
- No data is modified; privacy controls and disk access requirements noted.
- Full documentation included for usage and troubleshooting.
v1.0.0
Initial release — securely read local WeChat data from SQLite databases.
- List contacts, chat sessions, and favorites from desktop WeChat databases (macOS/Windows).
- Search messages by keyword.
- View summary statistics (number of contacts, chats, messages, favorites).
- Read-only: no data is modified; full disk access permissions required.
- Custom data path support for non-standard installations.
Metadata
Frequently Asked Questions
What is Wechat Connect?
Install OpenClaw's official WeChat plugin and complete account pairing via QR code scan. Triggers when the user says "install WeChat plugin", "connect WeChat... It is an AI Agent Skill for Claude Code / OpenClaw, with 7527 downloads so far.
How do I install Wechat Connect?
Run "/install wechat" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Wechat Connect free?
Yes, Wechat Connect is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Wechat Connect support?
Wechat Connect is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Wechat Connect?
It is built and maintained by yishan (@manifoldor); the current version is v2.1.0.
More Skills