← Back to Skills Marketplace
WeChat MP Assistant
by
jason-aka-chen
· GitHub ↗
· v1.0.0
· MIT-0
118
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install wechat-mp-assistant-chen
Description
WeChat Official Account Manager - Automatically generate articles, images, SEO optimization, and data analysis. Supports end-to-end operations from topic sel...
Usage Guidance
This skill claims to manage and publish to WeChat Official Accounts but does not declare the AppID/Secret or provide the runtime code it references. Before installing or running this skill: (1) ask the publisher for a homepage or source repository and a clear list of required credentials (e.g., WECHAT_APPID, WECHAT_SECRET) and how they are stored/used; (2) do not enter long-lived account secrets until you verify the code; prefer short-lived tokens or a least-privilege account for publishing; (3) be cautious about allowing the agent to pip-install packages — inspect the exact packages and versions (and ideally pin them) and review their source; (4) clarify which image-generation or multi-platform services are used and what additional credentials they require; (5) if you cannot verify the source, run the skill in a sandboxed environment or decline installation. These gaps make the package suspicious rather than clearly benign.
Capability Analysis
Type: OpenClaw Skill
Name: wechat-mp-assistant-chen
Version: 1.0.0
The skill bundle contains standard metadata and documentation for a WeChat Official Account management tool. The SKILL.md file describes legitimate features such as content generation and data analysis using established libraries like 'wechatpy', and lacks any indicators of malicious intent, data exfiltration, or prompt injection attacks.
Capability Assessment
Purpose & Capability
The declared purpose (manage WeChat Official Accounts: generate/publish content, analyze data) is plausible, and the SKILL.md describes relevant features. However, the skill metadata declares no required credentials or config paths even though the instructions show an appid/secret JSON and describe publishing — a WeChat integration legitimately needs those credentials. Also the SKILL.md references a Python module 'mp_assistant' which is not included and not referenced in the registry metadata or a homepage, so it's unclear where runtime code comes from.
Instruction Scope
The SKILL.md tells the agent to install packages (pip install requests wechatpy), configure an appid/secret, and run code that imports 'mp_assistant' to generate and publish content. Because no code files are provided, the instructions implicitly require fetching or installing code from external sources (e.g., PyPI or the internet). The instructions do not limit what external endpoints or image-generation services to use for AI images or multi-platform sync, granting broad discretion to contact arbitrary services. The instructions also perform actions (publishing) that require secrets but do not declare or restrict how those secrets are handled.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md recommends pip installing requests and wechatpy. Suggesting pip installs is common, but installing packages at runtime pulls remote code (PyPI) that will execute locally; because the skill provides no fixed source for the 'mp_assistant' module, the agent might attempt to pip-install unknown packages or fetch code from untrusted locations. This raises moderate risk but is expected for a Python-based integration unless a pinned/verified package or source is provided.
Credentials
The instructions explicitly require an Official Account AppID and Secret (sensitive credentials), but the skill metadata lists no required env vars or primary credential. That's a mismatch: a WeChat publish workflow needs those secrets, and the registry should declare them and justify their scope. Additionally, other capabilities mentioned (image generation, multi-platform sync) likely need additional credentials or third-party API keys that are not declared.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-wide privileges in the metadata. There is no install spec that writes files or modifies other skills' configurations. This dimension shows no elevated privilege by itself.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install wechat-mp-assistant-chen - After installation, invoke the skill by name or use
/wechat-mp-assistant-chen - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of WeChat Official Account Assistant.
- Automates article and image generation with SEO optimization and hot topic analysis.
- Provides data analysis features including read counts, follower tracking, and competitor analysis.
- Supports scheduled posting, multi-platform synchronization, and comprehensive data statistics.
- Workflow guides users from topic selection to publication.
- Designed for self-media operators, enterprise accounts, and individual content creators.
Metadata
Frequently Asked Questions
What is WeChat MP Assistant?
WeChat Official Account Manager - Automatically generate articles, images, SEO optimization, and data analysis. Supports end-to-end operations from topic sel... It is an AI Agent Skill for Claude Code / OpenClaw, with 118 downloads so far.
How do I install WeChat MP Assistant?
Run "/install wechat-mp-assistant-chen" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is WeChat MP Assistant free?
Yes, WeChat MP Assistant is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does WeChat MP Assistant support?
WeChat MP Assistant is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created WeChat MP Assistant?
It is built and maintained by jason-aka-chen (@jason-aka-chen); the current version is v1.0.0.
More Skills