← 返回 Skills 市场
96
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install weclaw-installer
功能描述
Automate installing and configuring the WeClaw WeChat bot environment on macOS. Use when the user asks to download/install WeClaw, set up a local Python envi...
安全使用建议
This skill instructs cloning and running code from an external GitHub repository while the core installer (setup_package.py) is not included in the skill bundle — that makes it impossible to audit what the installer will do. Before installing or running this skill: (1) Inspect the external GitHub repo yourself (especially setup_package.py) and confirm you trust its maintainer. (2) Do not paste your real API key until you understand how it will be used or stored; consider using a test key. (3) Run the installer in an isolated environment (VM/container) or on a throwaway account. (4) Ask the skill author to publish the missing setup_package.py (or include full installer code) and to declare the exact purpose of the API key. If you cannot review the external repository, do not run the skill.
功能分析
Type: OpenClaw Skill
Name: weclaw-installer
Version: 1.0.0
The skill bundle acts as an installer for a WeChat bot that requires high-privilege macOS Accessibility permissions and an API key. It directs the agent to clone an external repository (https://github.com/Popilopi168/weclaw-package-upload-test) and executes logic via scripts/run_setup.py, which uses a brittle path traversal (parents[3]) to import the primary setup code from the workspace root. The combination of requesting sensitive permissions and executing unvetted external code not included in the bundle poses a significant security risk, even if it aligns with the stated purpose of UI automation.
能力评估
Purpose & Capability
The name/description (WeClaw installer) matches the declared requirements (git, uv, python3) and the tasks (clone repo, run installer). However the skill package does not include the actual installer implementation (setup_package.py is referenced but absent), so the package cannot be verified as self-contained.
Instruction Scope
SKILL.md explicitly instructs the agent to clone an external GitHub repository and run a Python entrypoint that imports setup_package.setup_openclaw_package. The included wrapper (scripts/run_setup.py) will execute code from that external repo. The instructions also request an API key interactively. Downloading and executing code from an external, unreviewed repo and passing a user-provided API key to it is outside what can be validated from this skill bundle alone.
Install Mechanism
There is no formal install spec in the skill; instead the runtime instructions require cloning an external GitHub repository (https://github.com/Popilopi168/weclaw-package-upload-test) and executing Python code from it. Running arbitrary code fetched at runtime is higher risk because the executed module (setup_package.py) is not present in the published files for review.
Credentials
The skill declares no required environment variables but its runtime instructions tell the agent to ask the user for an API key (and pass it to the external setup). Asking for a single API key is reasonable for an installer, but the skill metadata does not declare this requirement and the behavior of code that receives the key (setup_package) cannot be audited here.
Persistence & Privilege
always is false and there is no install that persists or modifies other skills/system configs in the provided files. However, because the skill instructs execution of external code, autonomous invocation by the agent (default) would increase risk if the external code is malicious.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install weclaw-installer - 安装完成后,直接呼叫该 Skill 的名称或使用
/weclaw-installer触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of weclaw-installer.
- Automates installing and configuring the WeClaw WeChat bot environment on macOS.
- Checks for required tools: git, uv, and python3.
- Guides users to fix blocked macOS Accessibility permissions and helps with API key setup.
- Provides a setup script (`python3 scripts/run_setup.py`) with CLI flags for API key and macOS permission confirmation.
- Ensures safety by only handling necessary config values, surfacing clear errors, and offering next steps.
元数据
常见问题
Weclaw Installer 是什么?
Automate installing and configuring the WeClaw WeChat bot environment on macOS. Use when the user asks to download/install WeClaw, set up a local Python envi... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 96 次。
如何安装 Weclaw Installer?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install weclaw-installer」即可一键安装,无需额外配置。
Weclaw Installer 是免费的吗?
是的,Weclaw Installer 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Weclaw Installer 支持哪些平台?
Weclaw Installer 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(darwin)。
谁开发了 Weclaw Installer?
由 Hang Yin(@popilopi168)开发并维护,当前版本 v1.0.0。
推荐 Skills