技能详情(站内镜像,无评论)
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v1.0.0
统计:⭐ 0 · 196 · 0 current installs · 0 all-time installs
⭐ 0
安装量(当前) 0
🛡 VirusTotal :良性 · OpenClaw :可疑
Package:aw11100/wechatmessaging
安全扫描(ClawHub)
- VirusTotal :良性
- OpenClaw :可疑
OpenClaw 评估
The skill's instructions mostly match a WeChat messaging helper but contain inconsistencies and potentially risky details (hardcoded appid and an IP endpoint) that deserve verification before use.
目的
The stated purpose (query contacts and send WeChat text messages) aligns with the described API calls (queryFriend, sendText). However the registry metadata declares no required environment variables while SKILL.md uses WECHAT_APPID (and even provides a concrete value). That mismatch is incoherent and should be resolved.
说明范围
Instructions direct the agent to call an external endpoint (base URL set to https://192.168.29.1:8080) and to use an appid value embedded in the SKILL.md. The flow itself (query then confirm then send) is scoped to messaging, but the hardcoded appid and the use of an IP-address endpoint (likely an internal host) are risky: the agent will send user-supplied message content and contact identifiers to that endpoint. There are no directives to aut…
安装机制
Instruction-only skill with no install spec or code files. This minimizes disk write/execution risk; no installers or external packages are pulled.
证书
The registry advertised no required env vars, yet SKILL.md references WECHAT_APPID (and populates it with a concrete value). Hardcoding what appears to be an application credential in SKILL.md is inappropriate for a public skill and suggests either sloppy packaging or unintended exposure of a secret. The endpoint also implies the skill expects a reachable service that is not declared.
持久
Skill does not request always:true and is user-invocable only. It does not claim to modify other skills or system settings. Autonomous invocation is permitted (platform default) but there are no extra persistence privileges requested.
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「wechat_messaging」。简介:通过微信查询好友并确认后,向指定好友发送文本消息,支持多好友选择和发送确认流程。。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/aw11100/wechatmessaging/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
name: wechat_messaging
description: 通过微信向好友发送消息。流程:查询好友 -> 确认目标 -> 发送内容。
# 这里填入你的 API 基础域名,例如 http://api.example.com
endpoint: https://192.168.29.1:8080
env:
WECHAT_APPID: wx_KcD1dMEn7KidBemwN2lVh
---
# 微信消息助手技能说明
## 工具 1: 查询好友 (queryFriend)
- 路径: `GET /aiTest/queryFriend`
- 参数:
- `appid`: {{env.WECHAT_APPID}}
- `name`: 用户提供的好友名称
## 工具 2: 发送消息 (sendText)
- 路径: `POST /aiTest/sendText`
- 参数:
- `appid`: {{env.WECHAT_APPID}}
- `contact`: 目标好友的 wxId (从 queryFriend 获取)
- `content`: 文本内容
## 强制逻辑流程
1. 收到发消息请求,必须先执行 `queryFriend`。
2. 若返回多个好友,展示列表让用户选。
3. 若返回一个好友,告知用户并询问“确定发送吗?”。
4. 得到确认后,再执行 `sendText`。