Weixin Connect

连接个人微信（不是企业微信）。用户说"连接个人微信"、"接入个人微信"、"绑定个人微信"、"个人微信扫码"时使用本 skill。注意：如果用户说的是"企业微信"或"企微"，本 skill 不适用，请使用 wecom-connect skill。一旦匹配本 skill，必须严格按流程执行到底，不得跳步或自由发挥。

This skill appears to legitimately implement a personal WeChat connect flow, but exercise caution before running it: (1) Inspect the npm package @tencent-weixin/openclaw-weixin-cli (source repo, publisher, recent releases) before npx executes it — npx runs remote code. (2) Ask where upload_to_cdn uploads images (which CDN, what account, privacy policy); the SKILL.md forces use of a CDN and forbids alternatives, so QR images (which grant login) could be exposed externally. (3) Be aware the skill will write bot tokens to ~/.openclaw/openclaw-weixin/*.json and restart the gateway — ensure you trust the destination path and backup anything important. (4) If you cannot verify the npm package or the CDN, do not run the instructions; request the skill author to provide source code, a trusted install URL (GitHub release), or an option to use a local-only upload method. (5) Prefer testing in an isolated environment (VM or throwaway account) and validate the installed package contents before allowing it to run in your main account.

Type: OpenClaw Skill Name: weixin-connect Version: 1.0.0 The skill 'weixin-connect' facilitates connecting a personal WeChat account via Tencent's iLink service but contains significant command injection vulnerabilities. In SKILL.md, the instructions direct the agent to fetch data from a remote API (ilinkai.weixin.qq.com) and inject it directly into shell commands and JavaScript files using 'sed' and 'node -e' without any input sanitization. This pattern (specifically in Step 2 and Step 4b) allows for potential code execution if the API response contains malicious characters. While the workflow appears legitimate, the unsafe handling of external data in shell execution poses a high risk.