weixin-mcp

Send and receive WeChat messages, list contacts, and manage a listening daemon via the CLI tool npx weixin-mcp.

This skill appears coherent and behaves as a thin wrapper around the third-party weixin-mcp CLI, but take these precautions before installing or running it: 1) Understand npx will fetch and execute code from the npm registry — inspect the package page, GitHub repo, recent releases, and the package author (bkmashiro) before use. 2) Tokens are stored locally in accounts/<id>.json; treat those files as sensitive and set WEIXIN_MCP_DIR to an isolated directory if desired. 3) Do NOT point webhooks at public/external URLs — SKILL.md warns that webhooks can include a 'context_token' and message content; use localhost or internal endpoints only. 4) Consider running the first login and daemon in a sandboxed or non-privileged environment (separate user or container). 5) Verify the package version you intend to run (the skill metadata has minor version references mismatch) and prefer pinned, audited releases. If you need higher assurance, review the weixin-mcp source code on GitHub and the npm package contents before allowing the agent to invoke it.

Type: OpenClaw Skill Name: weixin-mcp Version: 1.2.1 The weixin-mcp skill bundle provides instructions and metadata for an AI agent to interact with WeChat via a dedicated CLI tool. The SKILL.md file contains transparent documentation regarding sensitive token storage (accounts/*.json) and explicitly warns the agent/user to use trusted, local webhook URLs to prevent data exposure. No evidence of malicious intent, prompt injection, or unauthorized data exfiltration was found; the capabilities described are strictly aligned with the stated purpose of WeChat integration.