wechat-skill

Windows 电脑端微信消息发送 MCP，实现在微信上给指定联系人发送消息

This skill appears to do exactly what it claims: control the WeChat desktop window to send messages via GUI automation. Before installing or running it, consider the following: (1) it takes and saves screenshots of your WeChat window to the skill folder — these may contain sensitive messages; (2) it copies message text to your clipboard (overwriting whatever was there); (3) it sends global keystrokes and mouse clicks and can accidentally send input to the wrong window if focus is lost; (4) dependencies are installed from PyPI — review them and install manually if you prefer; (5) the SKILL.md uses a user-specific path example (C:\Users\toby\...) — adjust to your environment. If you accept those privacy/usability trade-offs, prefer to review the script yourself and run it in a controlled session (no other important apps focused) and remove saved screenshots afterward.

Type: OpenClaw Skill Name: wechat-skill Version: 1.0.1 The skill employs high-risk GUI automation and screen capture capabilities using 'pyautogui' and 'Pillow' to interact with the WeChat desktop client. It explicitly disables the 'pyautogui' failsafe mechanism and saves multiple screenshots of the application's interface (containing potentially private chat data) to the local directory (server.py). While these behaviors align with the stated goal of automating a non-API-based application, the broad control over system input and the local storage of sensitive screen data represent a significant attack surface without clear evidence of data exfiltration.