Wechat Automation

微信RPA自动化技能。基于pywechat3（pip install pywechat127）实现Windows PC微信自动化操作，包括发消息、批量群发、读取聊天记录、获取通讯录、自动回复、朋友圈管理等。当用户需要操作微信（发消息、查记录、自动回复等）时激活。

This skill implements WeChat UI automation but has a few red flags to consider before installing: - The scripts assume a local developer path (D:\code\pywechat3). If that path doesn't exist, the included scripts will fail or may try to use an undeclared local copy; confirm whether you should install pywechat127 from PyPI or provide/inspect a local copy first. - Installing required packages uses pip (network install). Inspect the pywechat127 package and its source (the README points to GitHub) before installing into any environment. - The skill will read the registry to find WeChat and write .bat files to your Desktop for out-of-sandbox execution; only run generated .bat files that you review and trust. - Because the tool automates sending messages, avoid using it for bulk/unsolicited messaging — it can trigger account restrictions and may violate service terms. Recommendations: inspect the included scripts (especially any unexpected network calls), confirm whether you want to install pywechat127 into a disposable or virtual environment, remove or fix hard-coded sys.path references if you plan to run inside your environment, and prefer running the code on a controlled Windows machine rather than blindly double-clicking generated .bat files. If you need higher assurance, ask the publisher for clarification about the D:\code\pywechat3 dependency and for a formal install procedure.

Type: OpenClaw Skill Name: zyq-wechat-automation Version: 1.1.0 The skill provides extensive WeChat automation capabilities, including reading private chat history and contact lists, which are high-risk data access behaviors. Most notably, 'scripts/generate_bat.py' is designed to bypass OpenClaw's sandbox by writing executable batch files directly to the user's Windows Desktop to facilitate host-level execution. Additionally, the code relies on a hardcoded local path (D:\code\pywechat3) and a specific PyPI package (pywechat127), which could be used for local library hijacking or indicates a non-portable, potentially untrusted development environment.