Wechat Mcp

Windows 电脑端微信消息监控与发送 MCP，实现在微信上给指定联系人发送消息

This skill automates your Windows desktop to send WeChat messages by simulating clicks and clipboard operations. Before installing or running it: - Review the code yourself (or ask the author) because SKILL.md claims a contact-search/send_message_to_contact flow that is not implemented; expect only send_message_to_current behavior. - Be aware the code disables pyautogui's FAILSAFE (pyautogui.FAILSAFE = False). Consider changing that to True to allow aborting automation by moving the mouse to a screen corner. - The skill writes screenshot files (verify.png, input_verify.png, result.png) into the skill directory — ensure that is acceptable for your environment. - requirements.txt lists pytesseract (and Tesseract requires a separate system binary). Confirm whether OCR is needed and install/enable it only if required. - Because this automates the GUI and clipboard, test in a safe environment (with a test WeChat account) to avoid sending messages to the wrong contact. If you need higher assurance, ask the publisher to: (1) fix the documentation to match implemented functions, (2) remove or justify unnecessary dependencies, (3) re-enable pyautogui failsafe or add an explicit emergency-stop mechanism, and (4) declare any files the skill will create.

Type: OpenClaw Skill Name: wechat-mcp Version: 1.0.0 The skill is classified as suspicious due to the inherent risks associated with GUI automation and the explicit disabling of `pyautogui.FAILSAFE` in `server.py`. While the stated purpose of automating WeChat message sending appears legitimate, the use of `pyautogui` grants broad control over the user's desktop, including simulating mouse clicks and keyboard presses, which could lead to unintended actions if the environment changes or the script's assumptions are incorrect. The disabling of the failsafe mechanism removes a critical safety feature, increasing the risk of a runaway script. Additionally, the script saves screenshots (`verify.png`, `input_verify.png`, `result.png`) to the local directory, which could inadvertently capture and store sensitive information from the screen.