← 返回 Skills 市场
399
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install wechat-moments-post
功能描述
Automate posting to WeChat Moments on Windows desktop (open Moments window, trigger publish entry, select image, paste caption, click publish). Use when aske...
安全使用建议
Before installing, note three practical issues: (1) metadata mismatch — the registry lists no required env vars or dependencies but SKILL.md and scripts require WECHAT_EXE, WECHAT_MOMENTS_IMAGE, WECHAT_MOMENTS_CAPTION and several Python packages; ask the publisher to fix the manifest or provide an install recipe. (2) The scripts take full-screen screenshots and use the clipboard and temporary files; run on a machine/account with no sensitive open windows and review the created temp files. (3) You must install and audit dependencies (pyautogui, pygetwindow, pywinauto, rapidocr_onnxruntime, pillow). RapidOCR or its runtime may download models at first run — verify offline behavior or inspect that component separately. If you proceed, prefer manual (user-invoked) execution for initial testing, review the temp output directory, and confirm there is no unexpected network activity. If you are not comfortable resolving the dependency/manifest gaps, treat the skill as untrusted.
功能分析
Type: OpenClaw Skill
Name: wechat-moments-post
Version: 1.0.0
The skill bundle automates WeChat Moments posting using UI automation techniques that involve high-risk primitives, such as launching an executable from an environment variable (`WECHAT_EXE`) via `subprocess.Popen` in `relaunch_wechat_open_moments.py` and capturing screen content with `PIL.ImageGrab` for OCR processing in `click_publish_ocr.py` and `publish_with_caption_verify.py`. While these capabilities are aligned with the stated purpose of automating a desktop application, the lack of input validation on the executable path and the broad use of screen capture are inherently risky behaviors. No evidence of intentional malice, such as data exfiltration or unauthorized remote control, was observed.
能力评估
Purpose & Capability
The scripts clearly implement Windows UI automation to open WeChat Moments, select an image, paste a caption, click publish and verify — this matches the skill name and description. However, the registry metadata lists no required environment variables or binaries while SKILL.md requires WECHAT_EXE, WECHAT_MOMENTS_IMAGE, and WECHAT_MOMENTS_CAPTION; that mismatch is an incoherence that could lead to unexpected runtime failures or hidden requirements. The scripts also import several Python packages (pyautogui, pygetwindow, pywinauto, rapidocr_onnxruntime, PIL) that are not declared in the registry.
Instruction Scope
The runtime instructions and included scripts stay within the stated purpose: they interact with the WeChat windows, type/paste captions, select files, click buttons, and run OCR to confirm. They do, however, capture screenshots (ImageGrab.grab) and write them to a temp directory, and they use the clipboard. Those actions are necessary for visual verification but mean the skill will take and store images of your desktop (possibly containing other sensitive content). There is no code that transmits data over the network or exfiltrates secrets, but the screenshot/clipboard side effects are privacy-sensitive.
Install Mechanism
There is no install specification even though the code imports multiple third-party Python packages. That omission is risky: the agent or user must separately install those packages (including rapidocr_onnxruntime, which may have model or runtime download behavior). No provenance or package versions are provided, increasing the chance of surprising network downloads or dependency conflicts. The skill is instruction-only in the registry but includes executable scripts — an inconsistency worth noting.
Credentials
The environment variables referenced by SKILL.md (WECHAT_EXE, WECHAT_MOMENTS_IMAGE, WECHAT_MOMENTS_CAPTION, optional WECHAT_MOMENTS_TMP/VERIFY) are proportional to the stated task. However, the package metadata claims no required env vars; that mismatch is confusing and should be fixed. The skill does not request unrelated credentials or secrets.
Persistence & Privilege
The skill does not request always:true and does not claim persistent system-wide modifications. It launches the WeChat executable and manipulates the GUI, which is expected. The skill can be invoked autonomously by the agent (default), which increases blast radius if misused, but that is the platform default and not by itself a red flag. Consider restricting autonomous invocation if you want tighter control.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install wechat-moments-post - 安装完成后，直接呼叫该 Skill 的名称或使用
/wechat-moments-post触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
WeChat Moments Post 1.0.0 – Initial release.
- Automates stable posting to WeChat Moments on Windows desktop, including image upload and caption input.
- Covers steps: open Moments window, select image, paste caption, publish, and verify result.
- Provides configurable options for WeChat executable path, image, caption, and verification.
- Includes modular scripts for each workflow step.
- Detailed guidance and workflow references provided for reliability.
元数据
常见问题
WeChat Moments Post 是什么？
Automate posting to WeChat Moments on Windows desktop (open Moments window, trigger publish entry, select image, paste caption, click publish). Use when aske... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 399 次。
如何安装 WeChat Moments Post？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install wechat-moments-post」即可一键安装，无需额外配置。
WeChat Moments Post 是免费的吗？
是的，WeChat Moments Post 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
WeChat Moments Post 支持哪些平台？
WeChat Moments Post 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 WeChat Moments Post？
由 zch-danny（@zch-danny）开发并维护，当前版本 v1.0.0。
推荐 Skills