← 返回 Skills 市场
qywx-notify
作者
yc-weichao
· GitHub ↗
· v1.0.0
· MIT-0
267
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install qywx-notify
功能描述
A skill for sending notifications via WeChat Work.
安全使用建议
This skill appears to do exactly what it says: POST messages to a WeCom webhook you supply. Before installing: (1) keep webhook URLs secret — anyone with the URL can post messages; (2) review or remove noisy console logging in index.js if you don't want message content or masked webhook paths appearing in agent logs; (3) run npm install in a controlled environment and consider auditing or pinning the axios dependency (supply-chain risk); (4) test with a throwaway webhook first to confirm behavior; and (5) if your system aggregates logs externally, ensure logs from this skill won't leak sensitive content. If you need higher assurance, review the full index.js file locally (it is short and readable) or run it in an isolated container.
功能分析
Type: OpenClaw Skill
Name: qywx-notify
Version: 1.0.0
The qywx-notify skill is a standard implementation for sending notifications to WeChat Work (WeCom) via webhooks. The code in index.js follows best practices, including parameter validation, retry logic, and sensitive data masking in logs, with no evidence of data exfiltration, unauthorized execution, or malicious prompt injection.
能力评估
Purpose & Capability
Name/description (WeCom webhook notifications) align with the included files and behavior: index.js posts to a provided webhook URL and SKILL.md shows CLI and code usage. Dependencies (axios) are appropriate for HTTP calls.
Instruction Scope
SKILL.md instructions are in-scope (copy to ~/.openclaw/skills, run npm install, supply webhook URL). The code emits console logs of configuration and request payloads (it masks the webhook token path but still logs request data/content), which can expose message content or webhook tokens in local logs — consider this before using in environments where logs are collected.
Install Mechanism
No install spec in registry; SKILL.md asks the user to run npm install in the skill directory which will fetch axios from the public npm registry. This is expected for a Node skill but carries the usual npm supply-chain risks; the package.json lists only axios as a dependency.
Credentials
The skill requests no environment variables, credentials, or config paths. It only requires the webhook URL provided at runtime or via a configurable defaultWebhook — this is proportionate to the stated purpose.
Persistence & Privilege
Skill is not set to always:true and doesn't request elevated platform privileges. It stores its own configurable defaultWebhook in its config object according to SKILL.md; nothing indicates modification of other skills or global agent settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install qywx-notify - 安装完成后，直接呼叫该 Skill 的名称或使用
/qywx-notify触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
qywx-notify 1.0.0 initial release:
- Send notifications to WeChat Work (WeCom) group chats via robot webhook.
- Supports text, image (Markdown format), and rich Markdown messages.
- Includes CLI and code-based invocation, with optional @all mention.
- Features robust error handling, auto retry on failure, and common usage examples.
- Provides integration guidance for Node.js and Python.
- Details security best practices and troubleshooting steps.
元数据
常见问题
qywx-notify 是什么？
A skill for sending notifications via WeChat Work. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 267 次。
如何安装 qywx-notify？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install qywx-notify」即可一键安装，无需额外配置。
qywx-notify 是免费的吗？
是的，qywx-notify 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
qywx-notify 支持哪些平台？
qywx-notify 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 qywx-notify？
由 yc-weichao（@yc-weichao）开发并维护，当前版本 v1.0.0。
推荐 Skills