← Back to Skills Marketplace
399
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install wechat-moments-post
Description
Automate posting to WeChat Moments on Windows desktop (open Moments window, trigger publish entry, select image, paste caption, click publish). Use when aske...
Usage Guidance
Before installing, note three practical issues: (1) metadata mismatch — the registry lists no required env vars or dependencies but SKILL.md and scripts require WECHAT_EXE, WECHAT_MOMENTS_IMAGE, WECHAT_MOMENTS_CAPTION and several Python packages; ask the publisher to fix the manifest or provide an install recipe. (2) The scripts take full-screen screenshots and use the clipboard and temporary files; run on a machine/account with no sensitive open windows and review the created temp files. (3) You must install and audit dependencies (pyautogui, pygetwindow, pywinauto, rapidocr_onnxruntime, pillow). RapidOCR or its runtime may download models at first run — verify offline behavior or inspect that component separately. If you proceed, prefer manual (user-invoked) execution for initial testing, review the temp output directory, and confirm there is no unexpected network activity. If you are not comfortable resolving the dependency/manifest gaps, treat the skill as untrusted.
Capability Analysis
Type: OpenClaw Skill
Name: wechat-moments-post
Version: 1.0.0
The skill bundle automates WeChat Moments posting using UI automation techniques that involve high-risk primitives, such as launching an executable from an environment variable (`WECHAT_EXE`) via `subprocess.Popen` in `relaunch_wechat_open_moments.py` and capturing screen content with `PIL.ImageGrab` for OCR processing in `click_publish_ocr.py` and `publish_with_caption_verify.py`. While these capabilities are aligned with the stated purpose of automating a desktop application, the lack of input validation on the executable path and the broad use of screen capture are inherently risky behaviors. No evidence of intentional malice, such as data exfiltration or unauthorized remote control, was observed.
Capability Assessment
Purpose & Capability
The scripts clearly implement Windows UI automation to open WeChat Moments, select an image, paste a caption, click publish and verify — this matches the skill name and description. However, the registry metadata lists no required environment variables or binaries while SKILL.md requires WECHAT_EXE, WECHAT_MOMENTS_IMAGE, and WECHAT_MOMENTS_CAPTION; that mismatch is an incoherence that could lead to unexpected runtime failures or hidden requirements. The scripts also import several Python packages (pyautogui, pygetwindow, pywinauto, rapidocr_onnxruntime, PIL) that are not declared in the registry.
Instruction Scope
The runtime instructions and included scripts stay within the stated purpose: they interact with the WeChat windows, type/paste captions, select files, click buttons, and run OCR to confirm. They do, however, capture screenshots (ImageGrab.grab) and write them to a temp directory, and they use the clipboard. Those actions are necessary for visual verification but mean the skill will take and store images of your desktop (possibly containing other sensitive content). There is no code that transmits data over the network or exfiltrates secrets, but the screenshot/clipboard side effects are privacy-sensitive.
Install Mechanism
There is no install specification even though the code imports multiple third-party Python packages. That omission is risky: the agent or user must separately install those packages (including rapidocr_onnxruntime, which may have model or runtime download behavior). No provenance or package versions are provided, increasing the chance of surprising network downloads or dependency conflicts. The skill is instruction-only in the registry but includes executable scripts — an inconsistency worth noting.
Credentials
The environment variables referenced by SKILL.md (WECHAT_EXE, WECHAT_MOMENTS_IMAGE, WECHAT_MOMENTS_CAPTION, optional WECHAT_MOMENTS_TMP/VERIFY) are proportional to the stated task. However, the package metadata claims no required env vars; that mismatch is confusing and should be fixed. The skill does not request unrelated credentials or secrets.
Persistence & Privilege
The skill does not request always:true and does not claim persistent system-wide modifications. It launches the WeChat executable and manipulates the GUI, which is expected. The skill can be invoked autonomously by the agent (default), which increases blast radius if misused, but that is the platform default and not by itself a red flag. Consider restricting autonomous invocation if you want tighter control.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install wechat-moments-post - After installation, invoke the skill by name or use
/wechat-moments-post - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
WeChat Moments Post 1.0.0 – Initial release.
- Automates stable posting to WeChat Moments on Windows desktop, including image upload and caption input.
- Covers steps: open Moments window, select image, paste caption, publish, and verify result.
- Provides configurable options for WeChat executable path, image, caption, and verification.
- Includes modular scripts for each workflow step.
- Detailed guidance and workflow references provided for reliability.
Metadata
Frequently Asked Questions
What is WeChat Moments Post?
Automate posting to WeChat Moments on Windows desktop (open Moments window, trigger publish entry, select image, paste caption, click publish). Use when aske... It is an AI Agent Skill for Claude Code / OpenClaw, with 399 downloads so far.
How do I install WeChat Moments Post?
Run "/install wechat-moments-post" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is WeChat Moments Post free?
Yes, WeChat Moments Post is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does WeChat Moments Post support?
WeChat Moments Post is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created WeChat Moments Post?
It is built and maintained by zch-danny (@zch-danny); the current version is v1.0.0.
More Skills