← Back to Skills Marketplace
chenxundaozu

Wechat Qwen Reply

by chenxundaozu · GitHub ↗ · v0.1.1 · MIT-0
cross-platform ⚠ suspicious
307
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install wechat-qwen-reply
Description
WeChat chat reader + auto-reply (Qwen-VL vision + AHK send). Supports fast/slow capture, group nickname labels, file/red-packet cards, and filtering system m...
Usage Guidance
This skill appears to be an OCR-based WeChat reader but is incomplete and tied to the developer's local paths. Before using: (1) do not run it as-is — the package is missing the referenced .ps1 and .ahk scripts and uses a hardcoded C:\Users\chenxun path; (2) inspect or provide your own capture (.ps1) and send (.ahk) scripts and place them in a safe workspace you control; (3) move the API key out of a hardcoded file into a properly scoped secret (or at least confirm the expected file location) and verify the dashscope endpoint is legitimate for your account; (4) be aware the script will upload full screenshots (sensitive chat contents) to an external service — only proceed if you're comfortable with that data leaving your machine; (5) consider running in an isolated/test environment first and ask the author for a cleaned, configurable version (no hardcoded user paths, documented dependencies, and explicit declaration of required secrets). If you cannot verify these issues, treat the package as untrusted.
Capability Analysis
Type: OpenClaw Skill Name: wechat-qwen-reply Version: 0.1.1 The skill contains hardcoded absolute file paths to a specific user's directory (C:\Users\chenxun), which is a significant privacy and portability concern. It utilizes PowerShell with a 'Bypass' execution policy to capture screenshots of WeChat conversations and transmits this data to an external API (dashscope.aliyuncs.com). While these actions align with the stated purpose of chat recognition, the combination of environment-specific hardcoding and automated screen capture of private communications in scripts like qwen_vl_read.py warrants a suspicious classification.
Capability Assessment
Purpose & Capability
The skill claims WeChat chat reader + auto-reply, but the included code only performs capture→OCR→print/save flow. SKILL.md references PowerShell capture scripts and an AHK sender (wechat_capture_fast.ps1, wechat_capture_crop.ps1, wechat_send_chat.ahk), yet those files are not present in the bundle. The script also uses a hardcoded workspace path (C:\Users\chenxun\.nanobot\workspace) and a default contact name, which suggests it was left tied to the developer's environment rather than being generalized. Asking for AHK and PowerShell seems plausible for the stated purpose, but the absence of those scripts and hardcoded paths is incoherent.
Instruction Scope
The Python script will call PowerShell (ExecutionPolicy Bypass) to run capture scripts, read a local API key file at a hardcoded path, save/replace files under that same workspace, and then upload an embedded base64 PNG to https://dashscope.aliyuncs.com for OCR. Sending screenshots to a remote API is expected for OCR but is sensitive data exfiltration of chat images. The SKILL.md and script reference several local files and the AHK sender; the agent instructions do not declare or explain handling of sensitive data or permissions. The script will abort if the API key file is missing; there is a mismatch with the registry metadata which declared no required env/configs.
Install Mechanism
There is no install spec (instruction-only + single Python script), which reduces installation risk. However, runtime behavior executes PowerShell with ExecutionPolicy Bypass (to run external .ps1 scripts) and expects to call AHK; those runtime actions can execute arbitrary code if the referenced scripts are replaced or malicious, so verify the capture/send scripts before running.
Credentials
The package metadata lists no required credentials, but the script requires an API key file stored at a hardcoded path under C:\Users\chenxun\.nanobot\.secrets\dashscope_api_key.txt. This is an undeclared credential requirement and uses a developer-specific username/path. The skill also writes outputs into that workspace, potentially overwriting files. The credential access is not proportionally declared or configurable via environment variables.
Persistence & Privilege
The skill is not marked always:true and does not request elevated platform privileges. It does execute external scripts (PowerShell, AHK) and writes files to a workspace folder, but it does not alter other skills or system-wide configs in the provided code.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install wechat-qwen-reply
  3. After installation, invoke the skill by name or use /wechat-qwen-reply
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.1
Improve English description and tags.
v0.1.0
Initial release of wechat-qwen-reply. - Enables automatic reading and replying to WeChat PC chat (supports Qwen-VL vision model). - Supports quick (region screenshot) and stable (full screenshot + cropping) modes for chat text extraction. - Includes scripts for chat recognition, screenshot capture (PowerShell), and message sending (AHK). - Provides setup guidance and key dependency notes. - Output: recognized chat text and last cropped image are saved for reference. - Built-in prompt logic distinguishes between sender roles and chat types.
Metadata
Slug wechat-qwen-reply
Version 0.1.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Wechat Qwen Reply?

WeChat chat reader + auto-reply (Qwen-VL vision + AHK send). Supports fast/slow capture, group nickname labels, file/red-packet cards, and filtering system m... It is an AI Agent Skill for Claude Code / OpenClaw, with 307 downloads so far.

How do I install Wechat Qwen Reply?

Run "/install wechat-qwen-reply" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Wechat Qwen Reply free?

Yes, Wechat Qwen Reply is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Wechat Qwen Reply support?

Wechat Qwen Reply is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Wechat Qwen Reply?

It is built and maintained by chenxundaozu (@chenxundaozu); the current version is v0.1.1.

💬 Comments