Wechat Bot Starter

微信机器人快速搭建 - 基于 wechaty/itchat 的微信机器人模板。适合：想做微信自动化的开发者。

This skill appears to be a benign WeChat bot template, but review these before installing: - Metadata mismatch: the skill declares node/npm as required, but the README shows many Python examples (pip, itchat, requests, schedule). Make sure you have Python and required Python packages if you follow those examples. - Message leakage risk: the example OpenClaw integration posts raw message text and a user_id to an HTTP endpoint. Confirm that endpoint is local and trusted (avoid pointing it to unknown remote servers), and consider sanitizing or redacting sensitive data before sending. - Account safety: the guide warns about封号 (account bans). Using Web/itchat-based bots can lead to account suspension; prefer official enterprise WeChat where appropriate. - Paid components: Wechaty 'puppet' implementations (e.g., Pad or paid puppets) may require paid credentials or third-party services; the docs mention that tradeoffs exist—verify costs and terms. - Storage: hotReload=True stores session tokens on disk; protect those files and know where they are stored. If you want to proceed, ask the author to correct the declared requirements (add python/pip and required Python libs) and to make the OpenClaw endpoint configurable via a documented environment variable so you can ensure it points only to a trusted local service.

Type: OpenClaw Skill Name: wechat-bot-starter Version: 1.0.0 The wechat-bot-starter skill is a legitimate template for building WeChat bots using standard libraries like wechaty and itchat. The SKILL.md file contains educational code snippets for automation tasks (auto-reply, group management) and correctly warns users about account ban risks. No malicious indicators, data exfiltration, or suspicious execution patterns were found.