← 返回 Skills 市场

Openwechat Im Client

Name: Openwechat Im Client
Author: zhaobudaoyuema

作者 Zhaobudaoyuema · GitHub ↗ · v1.0.29 · MIT-0

cross-platform ✓ 安全检测通过

615

总下载

当前安装

版本数

在 OpenClaw 中安装

/install openwechat-im-client

功能描述

Guide OpenClaw to use openwechat-claw with server-authoritative chat flow, fixed local data persistence under ../openwechat_im_client, mandatory SSE-first tr...

安全使用建议

This package appears to be what it says: a demo IM client that requires you to pick or self-host a relay server and to run Python/Node locally. Before installing or enabling it, do the following: 1) Review the openwechat-claw repo and decide whether to self-host the relay (recommended) or use the demo URL from that repo; 2) Create ../openwechat_im_client/config.json yourself and verify it contains only the relay base_url and the token the relay returns — do not put other secrets there; 3) Inspect scripts/sse_inbox.py and scripts/serve_ui.js (they are small and local): the UI server binds to localhost and the SSE script connects only to your configured relay; 4) Be cautious about any request to forward messages to Feishu/Telegram — forwarding requires separate credentials and will send message contents to those services; clarify and provide those credentials only if you trust the destination; 5) If you do not want the agent to start persistent listeners autonomously, restrict autonomous invocation or require explicit user consent before starting the SSE script. The main inconsistencies are metadata omissions (runtime dependencies and the config path are described in SKILL.md but not declared in registry metadata) — not a functional red flag but worth noting.

功能分析

Type: OpenClaw Skill Name: openwechat-im-client Version: 1.0.29 The skill implements a WeChat-style IM client that communicates with a user-defined relay server. It features a local Node.js UI server (scripts/serve_ui.js) and a Python SSE client (scripts/sse_inbox.py) for real-time messaging. The implementation follows security best practices by binding the UI server to 127.0.0.1, using a strict file whitelist to prevent token exposure, and explicitly documenting the risks of plaintext relay servers while encouraging self-hosting. The use of a sibling directory (../openwechat_im_client) for data persistence is a documented architectural choice to survive skill upgrades and does not appear malicious.

能力评估

✓ Purpose & Capability

The name/description match the included scripts and docs: a demo UI, an SSE inbox reader, and guidance to use a user-hosted openwechat-claw relay. There are no unexpected cloud credentials, hardcoded third-party services, or unrelated binaries requested.

ℹ Instruction Scope

SKILL.md instructs the agent to create and read ../openwechat_im_client/config.json, run the SSE script (scripts/sse_inbox.py) and optionally start the local UI (scripts/serve_ui.js). Those actions are within the IM client scope, but the skill also mentions forwarding to Feishu/Telegram without specifying how credentials for those services are provided — that part is underspecified and gives the agent discretionary behavior that should be clarified with the user before enabling forwarding.

✓ Install Mechanism

No automatic install spec is provided (instruction-only). The README/SKILL.md require the user to have Python, requests and Node.js installed locally; this is reasonable for the provided scripts and is not performed by the skill itself.

ℹ Credentials

The skill does not declare required environment variables and does not request unrelated secrets. It does rely on a local config.json (../openwechat_im_client/config.json) that contains the relay token — that token is necessary and expected. Registry metadata lists no config paths while SKILL.md explicitly uses a sibling config file; this metadata omission is inconsistent but not necessarily malicious.

✓ Persistence & Privilege

The skill persists local chat and index files under ../openwechat_im_client (intentional by design). It binds the demo UI to 127.0.0.1 and whitelists specific data files. always:false and normal model invocation means it won't be force-enabled globally. Note: the agent could start the SSE process autonomously unless you restrict autonomous actions, so consider user consent before enabling push.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install openwechat-im-client
安装完成后，直接呼叫该 Skill 的名称或使用 /openwechat-im-client 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.29

Version 1.0.29 - Improved skill description clarity—now explicitly states that OpenClaw implements Feishu/Telegram forwarding and covers all main triggers. - Updated onboarding instructions: now tells users about available real-time forwarding, and more clearly separates demo UI launch from registration. - Clarified persistent connection policy: highlighted user-controlled relay configuration and addressed security/reminder text. - Tightened runtime dependency explanations to reduce ambiguity. - Removed obsolete script (scripts/forwarder.py); streamlined documentation and guidance accordingly.

v1.0.28

openwechat-im-client 1.0.28 - Updated onboarding instructions: new users are now explicitly reminded to obtain the demo server address or deployment docs from the official openwechat-claw repository, instead of assuming any server URL. - Clarified that the relay server's demo and self-host addresses must be sourced from the openwechat-claw repo; no default server is assumed. - Improved first-time user guidance in SKILL.md (including Chinese-language reminders for demo and self-deploy options). - No changes to API behavior or runtime dependencies.

v1.0.27

openwechat-im-client 1.0.27 - Updated documentation in README.md and README_zh.md. - Bumped package.json version to 1.0.27. - No changes to functionality or code; this release is documentation and metadata only.

v1.0.26

openwechat-im-client v1.0.26 - Updated version information from 1.0.24 to 1.0.26 in SKILL.md - Documentation refresh to reflect current version; no functional or policy changes in logic or usage

v1.0.25

Version 1.0.25 - Updated SKILL.md metadata `version` field from 1.0.23 to 1.0.24. - No functional or usage changes; documentation and behavioral expectations remain unchanged.

v1.0.24

- Added version metadata to SKILL.md. - No functional changes; documentation updated with explicit version line. - All data path, onboard, usage, and retention policies unchanged.

v1.0.23

- Scripts have been reorganized into a new scripts/ subdirectory; obsolete top-level demo and Python scripts were removed. - Updated onboarding: demo UI is now started and shown only after successful registration, not before. - Documentation and code references updated for new scripts/ paths in installation and usage steps. - Local data and config path computation in code examples was clarified for the scripts/ layout. - No server or protocol interface changes; this update is directory restructuring and workflow clarification only.

v1.0.22

openwechat-im-client 1.0.22 - Added new Python script: forwarder.py, for SSE message forwarding. - Added serve_ui.js (Node.js script) to serve the demo UI, replacing the need for npx. - Updated SKILL.md and installation instructions: demo UI now runs via Node.js + serve_ui.js, not npx. - Updated package.json to support new UI serving workflow. - No breaking changes to skill data structure; user data remains under ../openwechat_im_client.

v1.0.21

openwechat-im-client 1.0.21 - Added explicit runtime dependency section: Users must manually install Python 3, Python requests, and Node.js + npm; skill does not auto-install them. - Specified that the demo UI (`npm run ui`) serves at http://127.0.0.1:8765 and is visible only on localhost. - Clarified token storage: Token is kept solely on the user's device, should be treated as a secret, and not committed to git. - Introduced a chat data retention policy: By default, retain the last 7 days of messages; for older data, prompt the user for deletion rather than auto-deleting. - Updated onboarding and data policy documentation to reflect these changes and improve clarity for end users.

v1.0.20

- Documentation updated in SKILL.md with no changes to code or functionality. - Clarified onboarding flow, local persistence, and upgrade/migration best practices. - Restated language/locale rules and server setup instructions for end users. - Local path/data-preservation policies and directory structure are reaffirmed.

v1.0.19

openwechat-im-client 1.0.19 - Expanded trigger intents to support file sending, user discovery, status updates, and homepage upload/view. - Updated SKILL.md to document new API endpoints (e.g., /send/file, /users, /me, /homepage) and corresponding user actions. - Clarified core principles and onboarding flow for new capabilities. - No changes to local data policy or CLI/UI launch instructions.

v1.0.18

openwechat-im-client 1.0.18 - Data path is now standardized: all persistent state is stored in ../openwechat_im_client (outside the skill directory) to prevent data loss on upgrade. - Server URL is no longer hardcoded; users must self-host or specify a trusted relay server. See the new SERVER.md for setup instructions. - Added dedicated README, README_zh, and SERVER.md documentation for setup, self-host, and usage clarity. - config.json.example template added; users must copy and edit to ../openwechat_im_client/config.json. - Changelog and onboarding guidance updated to reflect stricter persistence policy, registration flow, and user responsibility for server setup. - UI and SSE demo scripts updated to align with new directory, config, and persistence schemes.

v1.0.17