← 返回 Skills 市场
746
总下载
1
收藏
5
当前安装
1
版本数
在 OpenClaw 中安装
/install wechat-tool
功能描述
通过微信查询好友、群聊及成员，确认目标后发送文本、图片或文件消息，实现社交管理与消息发送。
安全使用建议
Do not provide real WeChat credentials or appid to this skill until the following are resolved: (1) the skill manifest should declare required env vars and primary credential consistently (WECHAT_APPID, WECHAT_TOKEN); (2) the service endpoint (http://www.synodeai.com/ai) must be identified, owning party verified, and a privacy/security policy provided explaining how messages and tokens are handled; (3) prefer an implementation that calls official WeChat API endpoints (api.weixin.qq.com) or a trusted, documented proxy under your control. If you must test, use temporary, limited-scope credentials and avoid sending real user messages or sensitive files. When in doubt, ask the publisher for source code or a homepage before installing.
功能分析
Type: OpenClaw Skill
Name: wechat-tool
Version: 1.0.0
The skill bundle provides a standard interface for managing WeChat communications via an external API (synodeai.com). It includes well-defined tools for querying contacts and sending messages, and importantly, it mandates a 'Secondary Confirmation' step in its logic to ensure the user approves any message before it is sent, which mitigates the risk of unauthorized automated actions by the AI agent.
能力评估
Purpose & Capability
The skill's stated purpose is to query contacts and send WeChat messages, which would reasonably require a WECHAT_APPID and WECHAT_TOKEN. However, the registry metadata lists no required env vars or primary credential. The SKILL.md references WECHAT_APPID and WECHAT_TOKEN but they are not declared in the skill manifest — an incoherence between claimed purpose and declared requirements.
Instruction Scope
All runtime calls are directed to a third‑party endpoint (http://www.synodeai.com/ai) rather than an official WeChat API domain. The SKILL.md instructs the agent to include Authorization: Bearer {{env.WECHAT_TOKEN}} and to POST message contents (text, image/file URLs) to that endpoint — meaning user messages and credentials would be transmitted to an external service not described in the skill metadata or homepage.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so there is no package download or archive extraction risk. The primary risk comes from network calls described in the instructions, not from installation.
Credentials
The instructions require sensitive values (WECHAT_APPID, WECHAT_TOKEN) but the skill manifest declares none and does not identify a primary credential. Requesting a bearer token would be proportionate if the skill clearly integrated with WeChat's API; here the token would instead be sent to an unknown external endpoint, increasing risk of credential exfiltration.
Persistence & Privilege
The skill does not request always:true and has no install hooks or indications it will modify persistent agent settings. Autonomous invocation is allowed (platform default), but that alone is not flagged.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install wechat-tool - 安装完成后，直接呼叫该 Skill 的名称或使用
/wechat-tool触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of wechat-tool skill for WeChat social management and messaging.
- Supports searching friends, recent contacts, chatrooms, and chatroom members.
- Enables sending text, image, and file messages to friends or groups.
- Enforces confirmation flow: select target, confirm action, then send message.
- API endpoints require WECHAT_APPID and WECHAT_TOKEN configuration.
元数据
常见问题
wechat-tool 是什么？
通过微信查询好友、群聊及成员，确认目标后发送文本、图片或文件消息，实现社交管理与消息发送。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 746 次。
如何安装 wechat-tool？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install wechat-tool」即可一键安装，无需额外配置。
wechat-tool 是免费的吗？
是的，wechat-tool 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
wechat-tool 支持哪些平台？
wechat-tool 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 wechat-tool？
由 aw11100（@aw11100）开发并维护，当前版本 v1.0.0。
推荐 Skills