Wecom Add Friend

企业微信自动添加好友技能，支持批量手机号添加

This skill automates your mouse and keyboard to interact with the Enterprise WeChat PC client. Before using it: (1) verify you trust the script; (2) run the --setup flow while following prompts so coordinates are correct; (3) test with harmless/test phone numbers first to ensure it targets the correct window; (4) ensure WXWork is logged in and visible; (5) be aware the script can click anywhere if it misidentifies the window — keep a hand on the mouse/keyboard or use the FAILSAFE (move mouse to top-left) to abort; (6) ensure Python and required GUI libs (pyautogui, pygetwindow) are installed from trusted sources. If you need stronger guarantees, inspect the full script locally or run it in a controlled/test environment.

Type: OpenClaw Skill Name: wecom-add-friend Version: 1.0.1 The skill implements GUI automation for the WeChat Work (WeCom) PC client using high-risk libraries like `pyautogui` and `pygetwindow`, along with `subprocess` calls. While these capabilities are aligned with the stated purpose of automating friend requests, the inherent risk of desktop automation and the use of `shell=True` in `bin/wecom_auto_add.py` warrant a suspicious classification. The script includes a manual coordinate setup process and hardcoded test phone numbers (e.g., 18655104861), but no evidence of intentional malice, data exfiltration, or prompt injection was found.