← 返回 Skills 市场
jacky-wzj

wecom-gui-message

作者 jacky-wzj · GitHub ↗ · v3.0.1 · MIT-0
cross-platform ⚠ suspicious
99
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install wecom-gui-message
功能描述
通过 macOS GUI 自动化给企业微信(WeCom)联系人或群发消息。使用 peekaboo + screencapture + Swift Vision OCR + cliclick 实现全流程自动化。适用于需要通过企业微信桌面端发送消息的场景,如推送日报、通知等。触发词:企微发消息、企业微信发消息、wec...
安全使用建议
This skill appears internally consistent with its stated purpose, but consider the following before installing: - Security/privacy: It requires macOS Screen Recording and Accessibility permissions so it can read your screen and control the UI — while functioning it will capture screenshots (including any visible sensitive information) and store them under /tmp/wecom-gui. Only run it when you are comfortable with that and avoid having sensitive windows visible. - Metadata mismatch: The SKILL.md and code require helper tools (peekaboo, cliclick, swift) but the declared registry requirements list none. Verify you install these tools from trusted sources and that the author updates the metadata. - Review binaries: peekaboo and cliclick will be executing UI actions; prefer official releases or package manager installations and inspect their sources if possible. - Least privilege: Run in a controlled environment (test account or VM) first, and do not grant permissions unless you need the automation. If you plan to allow autonomous invocation, be aware an agent with this skill can control the WeCom desktop UI while it runs.
功能分析
Type: OpenClaw Skill Name: wecom-gui-message Version: 3.0.1 The skill performs GUI automation for Enterprise WeChat (WeCom) on macOS, requiring high-privilege permissions including Screen Recording and Accessibility. It uses `subprocess.run(shell=True)` in `scripts/send_message.py` to execute system commands and interact with third-party tools like `cliclick` and `peekaboo`. While the logic is consistent with the stated purpose of sending messages via OCR and coordinate-based clicking, the use of shell execution with user-provided message strings (despite basic quote escaping) poses a potential shell injection risk. No evidence of intentional data exfiltration or malicious intent was found.
能力评估
Purpose & Capability
The name/description (WeCom GUI message sender) matches the code and instructions: the Python driver + Swift OCR + use of cliclick/peekaboo/screencapture implement exactly that functionality. However, the registry metadata lists no required binaries/env vars while SKILL.md and the code clearly require external tools (peekaboo, cliclick, swift). This metadata omission is an inconsistency and should be corrected but does not by itself indicate malicious intent.
Instruction Scope
SKILL.md and scripts restrict actions to local macOS GUI automation: activating the WeCom app, window resizing, window screenshots, local OCR, clicking and pasting into the app. The instructions do not read unrelated files or environment variables, nor do they call external network endpoints. Important privacy note: the skill takes screenshots and runs OCR on them (including QR codes and any visible text), so it can capture any visible sensitive information on the screen while running.
Install Mechanism
This is an instruction-only skill with no install spec or remote downloads; that reduces risk because no additional code is being fetched during install. The runtime does call local tools (swift, peekaboo, cliclick, screencapture), so those must be installed separately from trusted sources.
Credentials
The skill requests no environment variables or credentials and only needs system permissions (Screen Recording and Accessibility) appropriate to GUI automation. The lack of credentials is proportional to the stated purpose.
Persistence & Privilege
always:false (not force-enabled) and default model invocation settings are used. The skill does not request persistent system-wide changes nor attempt to modify other skills' configs. It will create temporary files under /tmp/wecom-gui; this is expected for its operation.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install wecom-gui-message
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /wecom-gui-message 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.0.1
fix: remove personal names from code examples
v3.0.0
v3.0: 窗口截图替代全屏截图、坐标偏移换算、关闭右侧面板、发送前验证
元数据
Slug wecom-gui-message
版本 3.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

wecom-gui-message 是什么?

通过 macOS GUI 自动化给企业微信(WeCom)联系人或群发消息。使用 peekaboo + screencapture + Swift Vision OCR + cliclick 实现全流程自动化。适用于需要通过企业微信桌面端发送消息的场景,如推送日报、通知等。触发词:企微发消息、企业微信发消息、wec... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 99 次。

如何安装 wecom-gui-message?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install wecom-gui-message」即可一键安装,无需额外配置。

wecom-gui-message 是免费的吗?

是的,wecom-gui-message 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

wecom-gui-message 支持哪些平台?

wecom-gui-message 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 wecom-gui-message?

由 jacky-wzj(@jacky-wzj)开发并维护,当前版本 v3.0.1。

💬 留言讨论