qywx-msg-sender

通过企业微信群机器人 Webhook 发送消息通知。支持文本、Markdown、Markdown V2（表格）、图片、文件消息。 支持发送到指定会话（chatid）或通过名称发送（需先注册 webhook URL）。 适用场景：服务告警、定时任务结果推送、数据报告发送、任何需要通知企业微信群的情况。

This skill appears coherent and does what it says: send messages to Enterprise WeChat group bots. Before installing or running: (1) confirm you trust the webhook URLs you register — the URLs contain keys that allow posting to your groups; (2) protect the registry file (~/.wecom/chat_registry.json) with appropriate filesystem permissions because it stores webhook URLs in plaintext; (3) be aware that sending a file/image will upload its contents to WeCom (the upload endpoint is qyapi.weixin.qq.com); (4) review the scripts yourself if you run them in sensitive environments (they are simple shell scripts but will read any file path you pass); (5) ensure curl and jq come from trusted system packages. If you need stronger secrecy for webhook keys, avoid storing them in the registry or store them encrypted and modify the scripts accordingly.

Type: OpenClaw Skill Name: qywx-msg-sender Version: 1.0.1 The skill bundle provides a set of bash scripts for sending various message types (text, markdown, images, and files) to WeChat Work (WeCom) via webhooks. It includes a local registry system stored in `~/.wecom/chat_registry.json` to manage webhook URLs and chat IDs. The scripts use standard utilities like `curl` and `jq` to interact with the official `qyapi.weixin.qq.com` API, and the code logic is consistent with the stated purpose of providing notification capabilities without any evidence of malicious intent or data exfiltration.