WeChat File Sender

Send files via Windows WeChat desktop client by automating window control, clipboard, and keyboard input using Node.js and PowerShell scripts.

What to consider before installing: - The skill will open WeChat and cause the client to send whatever local file you pass; that is network transmission by WeChat even though the script itself makes no direct network calls. Do not use this on sensitive files unless you intend to send them. - Inspect the included PowerShell (send-file.ps1) yourself before running. The skill runs it with -ExecutionPolicy Bypass; that is needed for operation but also means the script will run even if system policies normally block .ps1 files. If the script is tampered with, that bypass could enable execution of malicious PowerShell. - Test with a harmless file and a trusted contact first. The automation uses clipboard and SendKeys and will affect the active desktop (it brings the WeChat window to foreground), so it can disrupt other user activity. - If you plan to allow autonomous agent use of this skill, be cautious: an agent with access to local files could use this skill to exfiltrate data to any WeChat contact. Consider restricting autonomous invocation or requiring explicit human approval for each run. - Prefer running in a sandbox/VM if you want to limit blast radius, and ensure the skill package files are obtained from a trusted source or re-audit them periodically. - Overall: functionality is coherent with the stated purpose, but the "no data exfiltration" claim is misleading and you should verify scripts and control invocation policies before using on sensitive data.

Type: OpenClaw Skill Name: wechat-file-sender Version: 1.0.1 The skill automates the Windows WeChat client using PowerShell and UI automation, which are high-risk capabilities. While the developer included security notes and input validation, a command injection vulnerability exists in `scripts/send-file-to-wechat.js`. The `filePath` validation only ensures the path is absolute and fails to sanitize shell metacharacters (like '&'), and the attempt to escape double quotes using `\"` is ineffective against the Windows CMD shell used by `execSync`. This could allow arbitrary command execution if an attacker controls the file path.