WeChat Group Operator

WeChat group operations automation for Windows desktop WeChat. Use when the user wants to run recurring group engagement workflows such as morning questions,...

This package mostly does what it says, but check two things before using or scheduling it: - Sender script dependency: The code calls a hard-coded local sender script at C:\Users\Lenovo\.openclaw\workspace\skills\wechat-desktop-sender\scripts\wechat_send.py. Make sure that file exists and is from a trusted source. Because the skill runs that script with Python, that script can execute arbitrary code on your machine — review its contents before running. - Missing history file: The code expects assets/post_history.json but that file is not present in the package manifest. Create an initial assets/post_history.json (e.g., {"posts": []}) or add handling for a missing history file to avoid runtime errors. - Operational safety: Always run --dry-run first and inspect the produced message text. Only attach to cron after you confirm sends are correct and the sender script is trusted. Consider modifying the skill to make the sender path configurable (env var or config) instead of hard-coding a user-specific path, and to fail clearly if the sender script is missing. If you cannot inspect or verify the sender script, treat this skill as risky because it executes another local program with full code-execution ability. If you can verify and/or change the hard-coded path to a known-good sender, the skill is reasonable for its intended purpose.

Type: OpenClaw Skill Name: wechat-group-operator Version: 0.1.0 The skill is a legitimate automation tool for managing WeChat group engagement, providing scheduled posting of questions and cases. The core logic in `scripts/wechat_group_operator.py` selects content from local JSON files and uses `subprocess.run` to call a secondary sender script. While the script contains a hardcoded absolute path to a specific user's directory (`C:\Users\Lenovo`) for the sender dependency, which is a non-portable coding practice, there is no evidence of malicious intent, data exfiltration, or unauthorized execution. The behavior is strictly aligned with the documented purpose of scheduled group operations.