wx

发送微信消息给指定联系人。支持两种模式：(1) 有消息内容：直接发送指定消息；(2) 无消息内容：OCR 截图识别聊天窗口内容并自动回复。当用户需要自动发送微信消息、自动回复微信聊天时触发此技能。

This skill automates WeChat by simulating keystrokes, modifying your clipboard, and taking full-screen screenshots for OCR. Before installing: (1) verify the skill source — it has no homepage and an unknown publisher; (2) inspect the scripts yourself — they will run locally and manipulate clipboard/screen; (3) be cautious granting macOS Accessibility and Screen Recording rights (these let the script see and control other app content); (4) note wx_ocr_reply.py mentions OpenAI but no API key is declared — if you enable OCR-reply, confirm where recognized text or screenshots are sent and whether an API key will be required; (5) run tests with a dummy account/contact and avoid running on systems with sensitive on-screen data. If you want to proceed, consider restricting network access during testing or reviewing/locking down any code paths that would send screenshots or clipboard contents to external services.

Type: OpenClaw Skill Name: wx-send Version: 1.0.0 The skill implements WeChat automation using high-risk methods, including full-screen screenshots (`screencapture` in `wx_ocr_reply.py`) and UI manipulation via AppleScript and `pyautogui`. While these capabilities align with the stated purpose of automated messaging and OCR-based replies, capturing the entire screen poses a significant privacy risk as it may inadvertently collect sensitive data from other visible applications. There is no evidence of data exfiltration or intentional malice, but the reliance on broad system permissions and invasive data collection techniques warrants a suspicious classification.