← Back to Skills Marketplace
clk1st

WeChat Send

by clk1st · GitHub ↗ · v1.0.0
darwin ⚠ suspicious
1014
Downloads
0
Stars
5
Active Installs
1
Versions
Install in OpenClaw
/install wechat-send
Description
Automate sending text messages in the macOS WeChat desktop app by controlling the UI via AppleScript and JXA. This is NOT a WeChat chat channel for OpenClaw...
Usage Guidance
This skill is coherent with its stated purpose of GUI-automating WeChat on macOS, but check these before installing: (1) Correct the Accessibility guidance — grant permission to the app/process that will run the script (Terminal, your agent gateway, or node only if you actually run it via node), not 'node' by default. (2) The script overwrites your clipboard with the message and does not restore it; modify the script to save/restore the previous clipboard if that matters to you. (3) GUI automation can send input to the wrong contact if search results are ambiguous — test with a non-sensitive dummy contact first. (4) Only grant Accessibility to trusted processes and consider running the script in a controlled environment. If you want higher assurance, ask the author to (a) fix the node/accessibility documentation mismatch, (b) add logic to save and restore the clipboard, and (c) optionally confirm which host/process is expected to run the commands.
Capability Analysis
Type: OpenClaw Skill Name: wechat-send Version: 1.0.0 The skill is vulnerable to AppleScript injection because the `$CONTACT` and `$MESSAGE` variables are directly interpolated into `osascript` command strings in `scripts/wechat_send.sh` without sanitization. While the script functions as described for UI automation, it requires granting high-privilege macOS Accessibility permissions to the `node` process, which could be abused if the agent is compromised. No evidence of intentional malice or data exfiltration was found.
Capability Assessment
Purpose & Capability
The script and SKILL.md align with the stated purpose of sending text via the WeChat macOS GUI using AppleScript/JXA. One inconsistency: the README/requirements repeatedly ask for macOS Accessibility permission granted to 'node', but the script runs osascript/osascript -l JavaScript (JXA) and bash — it does not invoke node. Requiring 'node' is likely an editing error and should be corrected to the actual runtime (Terminal, iTerm, the gateway process, or the node process only if you run it under node).
Instruction Scope
Instructions are scoped to activating WeChat, searching a contact, clicking the input field, setting the clipboard, and sending the message. Important side-effect: the script overwrites the system clipboard with the message (it does not restore the previous clipboard), which is a privacy/UX issue and should be documented or mitigated. The script only accesses args and UI; it does not read other files or network resources.
Install Mechanism
No install actions or remote downloads are performed (instruction-only plus a bundled shell script). Nothing is written to disk beyond the existing script file, so install risk is low.
Credentials
The skill requests no credentials or environment variables. The Accessibility permission it requires is proportional to the task (simulating keystrokes/mouse events).
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-wide configuration. It requires Accessibility permission to simulate UI events, which is necessary for its function but should be granted only to the specific host process that will run the script.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install wechat-send
  3. After installation, invoke the skill by name or use /wechat-send
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: automate sending text messages via macOS WeChat desktop app using AppleScript and JXA
Metadata
Slug wechat-send
Version 1.0.0
License
All-time Installs 5
Active Installs 5
Total Versions 1
Frequently Asked Questions

What is WeChat Send?

Automate sending text messages in the macOS WeChat desktop app by controlling the UI via AppleScript and JXA. This is NOT a WeChat chat channel for OpenClaw... It is an AI Agent Skill for Claude Code / OpenClaw, with 1014 downloads so far.

How do I install WeChat Send?

Run "/install wechat-send" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is WeChat Send free?

Yes, WeChat Send is completely free (open-source). You can download, install and use it at no cost.

Which platforms does WeChat Send support?

WeChat Send is cross-platform and runs anywhere OpenClaw / Claude Code is available (darwin).

Who created WeChat Send?

It is built and maintained by clk1st (@clk1st); the current version is v1.0.0.

💬 Comments