← 返回 Skills 市场
manifoldor

Wechat Connect

作者 yishan · GitHub ↗ · v2.1.0 · MIT-0
cross-platform ⚠ suspicious
9529
总下载
19
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install wechat
功能描述
Install OpenClaw's official WeChat plugin and complete account pairing via QR code scan. Triggers when the user says "install WeChat plugin", "connect WeChat...
安全使用建议
Install only if you trust this publisher and the npm package it pulls at runtime. Before use, understand that it can install external code, contact WeChat APIs, write a WeChat bot token under ~/.openclaw, enable an OpenClaw channel, update an allowlist, and restart the gateway. Prefer a version-pinned installer, close the local server after pairing, and know how to revoke or delete the stored token.
功能分析
Type: OpenClaw Skill Name: wechat Version: 2.1.0 The skill automates the installation of a WeChat plugin by executing remote code via 'npx -y @tencent-weixin/openclaw-weixin-cli@latest install' and starting a local HTTP server on port 8765 to facilitate a QR code login flow. While these actions are consistent with the stated purpose, the combination of remote package execution, local service hosting, and explicit instructions in SKILL.md to ignore security warnings regarding 'dangerous code patterns' (environment variable access and network communication) presents a significant security risk. The script also modifies local configuration files and restarts the OpenClaw gateway, which are high-privilege operations.
能力评估
Purpose & Capability
Installing a WeChat plugin, showing a QR pairing page, polling WeChat status, saving the paired account, enabling the channel, and restarting the gateway are coherent with the stated purpose.
Instruction Scope
The documentation discloses many side effects, but trigger wording is broad and the flow lacks an explicit confirmation step before installation, credential persistence, config mutation, and gateway restart.
Install Mechanism
If the plugin is missing, the script automatically runs an unpinned remote npm installer using npx with @latest, so the installed code can change outside this reviewed artifact.
Credentials
The local HTTP server listens on port 8765, exposes status with wildcard CORS, serves broad files from /tmp, and the status file can temporarily contain QR/session identifiers and a bot token after confirmation.
Persistence & Privilege
The skill writes the WeChat bot token to ~/.openclaw, updates OpenClaw channel settings and allowlists, and starts a detached shell-based gateway restart; these are purpose-related but high-impact and not tightly contained.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install wechat
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /wechat 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.1.0
Wechat Connect 2.1.0 introduces automated plugin installation for a smoother user experience. - The skill now automatically installs the @tencent-weixin/openclaw-weixin plugin if it is not already present; manual terminal steps are no longer required. - Updated documentation to reflect the new auto-installation process and adjusted dependency installation notes. - No code changes detected in this release.
v2.0.2
- Gateway now automatically restarts after account connection—no manual action required. - Success popup remains visible; you can use WeChat immediately after the restart. - Minor documentation updates and process clarifications.
v2.0.1
Major update: Skill reworked from local data reading to guided WeChat plugin installation and pairing. - New function: Guides users to install and connect the official OpenClaw WeChat plugin via QR code, with no command-line steps required. - Added visual step-by-step instructions (assets/001.png–004.png) shown through a local HTTP interface. - Automated QR code retrieval, state polling, and account configuration. - Includes browser-based user guidance, real-time feedback, and automatic account saving. - Old script and documentation for local SQLite reading removed.
v1.0.2
WeChat Local Data Reader - Initial Release - Allows read-only access to local WeChat data via SQLite. - List contacts, chat sessions, search messages, and view favorites. - Supports macOS (auto path) and Windows (custom path). - No data is modified; privacy controls and disk access requirements noted. - Full documentation included for usage and troubleshooting.
v1.0.0
Initial release — securely read local WeChat data from SQLite databases. - List contacts, chat sessions, and favorites from desktop WeChat databases (macOS/Windows). - Search messages by keyword. - View summary statistics (number of contacts, chats, messages, favorites). - Read-only: no data is modified; full disk access permissions required. - Custom data path support for non-standard installations.
元数据
Slug wechat
版本 2.1.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 5
常见问题

Wechat Connect 是什么?

Install OpenClaw's official WeChat plugin and complete account pairing via QR code scan. Triggers when the user says "install WeChat plugin", "connect WeChat... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 9529 次。

如何安装 Wechat Connect?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install wechat」即可一键安装,无需额外配置。

Wechat Connect 是免费的吗?

是的,Wechat Connect 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Wechat Connect 支持哪些平台?

Wechat Connect 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Wechat Connect?

由 yishan(@manifoldor)开发并维护,当前版本 v2.1.0。

💬 留言讨论