技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 1 · 690 · 3 current installs · 3 all-time installs
⭐ 1
安装量（当前） 3
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：aw11100/wechat-operate
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's described purpose (WeChat message/query) roughly matches its instructions, but there are unexplained inconsistencies (an undeclared env var, a hard-coded appid, and a non-public IP endpoint) that could allow unexpected network data flows — verify before installing.
目的
The skill claims to query contacts and send WeChat messages and the SKILL.md provides specific HTTP endpoints and parameters that implement that. However, the manifest declares no required environment variables while SKILL.md relies on WECHAT_APPID (and even includes a concrete appid value). That mismatch is incoherent: either the skill should declare the appid as a required/optional env or avoid embedding it.
说明范围
Runtime instructions tell the agent to call HTTP endpoints (GET/POST) to query contacts and send text/image/file content. Those calls will transmit whatever content the agent handles to the endpoint. The documented endpoint is a private IP (http://192.168.29.1:8080) and not an official WeChat API domain; this could be a local bridge or an arbitrary host. The skill does include confirmation steps before sending, which is good, but the instructi…
安装机制
No install spec and no code files (instruction-only). Nothing will be written to disk by the skill bundle itself, which limits supply-chain risk.
证书
The SKILL.md references WECHAT_APPID (and provides a concrete example value) but the skill metadata lists no required environment variables or primary credential. This is inconsistent. The appid is not a secret credential by itself, but the skill will include it in network requests; the lack of declared env requirements reduces transparency about what the agent will send. Also, no authentication or TLS is described for the endpoint.
持久
The skill is not always-enabled and does not request system config paths or other skills' credentials. Autonomous invocation is allowed by default, which is normal; there is no additional privileged persistence requested.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「wechat-operate」。简介：通过微信查询好友或群聊，确认目标后发送文本、图片或文件消息，实现社交管理与消息发送功能。。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/aw11100/wechat-operate/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
name: wechat_operate
description: 通过微信进行社交管理与消息发送。流程：查询目标（好友/群聊/成员） -> 确认目标 -> 发送内容（文本/图片/文件）。
endpoint: http://192.168.29.1:8080
env:
WECHAT_APPID: wx_KcD1dMEn7KidBemwN2lVh
---
# 微信消息助手技能说明
## 工具 1: 查询好友 (queryFriend)
- 路径: `GET /aiTest/queryFriend`
- 参数:
- `appid`: {{env.WECHAT_APPID}} (当前微信的appid)
- `name`: 好友的名称
## 工具 2: 查询最近联系人 (queryRecentContact)
- 路径: `GET /aiTest/queryRecentContact`
- 参数:
- `appid`: {{env.WECHAT_APPID}}
## 工具 3: 查询我的群聊 (queryChatroom)
- 路径: `GET /aiTest/queryChatroom`
- 参数:
- `appid`: {{env.WECHAT_APPID}}
## 工具 4: 查询群成员 (queryChatroomMembers)
- 路径: `GET /aiTest/queryChatroomMembers`
- 参数:
- `appid`: {{env.WECHAT_APPID}}
- `chatroomId`: 群id
## 工具 5: 发送文本消息 (sendText)
- 路径: `POST /aiTest/sendText`
- 参数:
- `appid`: {{env.WECHAT_APPID}}
- `contact`: 目标好友或群聊的 wxId
- `content`: 发送消息内容
## 工具 6: 发送图片消息 (sendImg)
- 路径: `POST /aiTest/sendImg`
- 参数:
- `appid`: {{env.WECHAT_APPID}}
- `contact`: 目标好友或群聊的 wxId
- `content`: 图片的连接信息
## 工具 7: 发送文件消息 (sendFile)
- 路径: `POST /aiTest/sendFile`
- 参数:
- `appid`: {{env.WECHAT_APPID}}
- `contact`: 目标好友或群聊的 wxId
- `fileUrl`: 文件的连接信息
- `fileName`: 文件名称（若为 null 则从 fileUrl 中解析）
---
## 强制逻辑流程
1. **查询目标**：收到发送请求后，必须先根据场景执行 `queryFriend` 或 `queryChatroom` 获取 `wxId`。
2. **多结果处理**：若返回多个结果，需展示列表让用户选择。
3. **二次确认**：
- 文本消息：告知目标名称并询问“确定发送吗？”。
- 图片/文件：展示文件信息/预览，并询问“确定发送给 [名称] 吗？”。
4. **最终发送**：得到确认后，再执行对应的 `send` 接口。