← 返回 Skills 市场
348
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install openclaw-wechat-mail-bridge-windows
功能描述
Install, configure, run, and troubleshoot a Windows WeChat desktop automation and BHMailer/OpenClaw mail bridge bundle, including File Transfer Assistant wor...
安全使用建议
This bundle appears to be what it says: a Windows WeChat desktop automation + BHMailer/OpenClaw bridge. Before installing, do the following: 1) Do not run with defaults — change BRIDGE_SHARED_SECRET from 'dev-bridge-secret' and do not bind the service to 0.0.0.0 on a public network unless you have a firewall and proper access controls. 2) Provide BHMAILER credentials only if you trust the provider and understand where mail data flows. 3) The Windows sidecar uses UI automation (pywinauto/uiautomation) and will interact with the logged-in WeChat client; run it only on a machine/account you dedicate to this purpose because it can read/send messages. 4) Confirm the apparent mismatch: SKILL.md mentions top-level .bat entrypoints but the bundle mostly contains bash scripts under bundle/plugin/scripts — verify which scripts you must run on Windows. 5) Review the bundled code (especially auth and any webhook handlers) and replace default secrets before exposing the service. If you want extra assurance, run the plugin and sidecar on an isolated network or VM and perform the provided smoke tests locally first.
功能分析
Type: OpenClaw Skill
Name: openclaw-wechat-mail-bridge-windows
Version: 0.1.2
The bundle is a legitimate automation tool designed to bridge Windows WeChat Desktop with a mail query service (BHMailer). It uses UI automation (pywinauto/uiautomation) and an optional visual fallback (OCR/VLM via uiautomation_adapter.py) to monitor and interact with WeChat messages. The security implementation is notably robust for a skill bundle, featuring HMAC-SHA256 request signing, nonce-based replay protection, and Bearer token authentication (auth.ts). It also includes explicit privacy controls to redact emails and WeChat text in logs (config/schema.ts). No evidence of malicious intent, unauthorized data exfiltration, or prompt injection was found; all high-privilege operations are transparently documented and aligned with the stated purpose.
能力评估
Purpose & Capability
The code and SKILL.md implement a plugin and a Windows sidecar that automate WeChat desktop and bridge BHMailer mail events to OpenClaw. Requested configuration (BHMAILER_*, BRIDGE_SHARED_SECRET, sqlite path, etc.) matches that purpose. There is no unexpected request for unrelated cloud credentials or distant services.
Instruction Scope
Runtime instructions in SKILL.md stay on-topic: they point operators to the bundle's install, config, and operations docs and tell operators to run the bundled scripts or inspect source. However, SKILL.md suggests using top-level scripts/*.bat for Windows setup while the shipped scripts in the bundle appear to be shell (bash) and plugin-side scripts; verify whether Windows-specific .bat entry points are actually present in the copy you install. Also the runtime expects editing environment/config files and running networked services — follow the docs and do not accept defaults blindly.
Install Mechanism
There is no remote download/install mechanism embedded in the SKILL.md; the bundle contains Node and Python source, package.json/package-lock and example configs. Dependencies are typical (fastify, better-sqlite3, zod) and come from npm; no suspicious external URLs or archive extraction steps found in the manifest.
Credentials
The bundle uses environment variables expected for this function (BRIDGE_SHARED_SECRET, BHMAILER_UID, BHMAILER_SIGN, BHMAILER_WEBHOOK_SECRET, SQLITE_PATH, etc.). This is proportional. Two operational cautions: defaults include an insecure shared secret ('dev-bridge-secret') and a default listen host of 0.0.0.0 — these are convenient for testing but dangerous in production if left unchanged. The skill does not request unrelated secrets.
Persistence & Privilege
The skill does not request forced/always-on privileges and registry flags show always:false and normal agent invocation. The bundle runs as a local service and a Windows sidecar that automates a desktop UI — that requires local user privileges which are appropriate for the declared functionality but should be limited to a dedicated/isolated host.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-wechat-mail-bridge-windows - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-wechat-mail-bridge-windows触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.2
Optimize ClawHub icon and metadata for better searchability around OpenClaw, WeChat desktop automation, BHMailer, and Windows sidecar workflows.
v0.1.1
Refine the ClawHub package layout and add mirrored release notes for the Windows/OpenClaw bundle.
v0.1.0
Initial ClawHub release for the Windows/OpenClaw WeChat-to-mail bridge bundle.
元数据
常见问题
WeChat Mail Bridge (Windows/OpenClaw) 是什么？
Install, configure, run, and troubleshoot a Windows WeChat desktop automation and BHMailer/OpenClaw mail bridge bundle, including File Transfer Assistant wor... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 348 次。
如何安装 WeChat Mail Bridge (Windows/OpenClaw)？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-wechat-mail-bridge-windows」即可一键安装，无需额外配置。
WeChat Mail Bridge (Windows/OpenClaw) 是免费的吗？
是的，WeChat Mail Bridge (Windows/OpenClaw) 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
WeChat Mail Bridge (Windows/OpenClaw) 支持哪些平台？
WeChat Mail Bridge (Windows/OpenClaw) 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 WeChat Mail Bridge (Windows/OpenClaw)？
由 YJLi-new（@yjli-new）开发并维护，当前版本 v0.1.2。
推荐 Skills