weixin-mcp
v1.2.1Send and receive WeChat messages, list contacts, and manage a listening daemon via the CLI tool npx weixin-mcp.
⭐ 0· 163·0 current·0 all-time
byYuzhe Shi@bkmashiro
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description (WeChat send/receive, contacts, daemon) matches the SKILL.md instructions which call the weixin-mcp CLI via npx. Required artifacts (none) and declared npmPackage/repository are coherent. Minor metadata discrepancy: skill.json lists version 1.2.0 while registry metadata shows 1.2.1 and SKILL.md pins the CLI at weixin-mcp@^1.7 — this is likely benign but worth verifying.
Instruction Scope
Runtime instructions are explicit and limited to running npx weixin-mcp commands (status, login, send, poll, start/stop daemon, etc.). The SKILL.md explicitly documents that login tokens are stored locally and that webhooks may receive message content including a 'context_token' (sensitive), and it advises using localhost-only webhooks. The instructions do not ask the agent to read unrelated files, environment variables, or system state.
Install Mechanism
This is an instruction-only skill (no install spec or code files). It relies on npx to fetch and run the weixin-mcp package from npm at runtime. Using npx means code is pulled from the npm registry on-demand (moderate supply-chain risk); SKILL.md pins a caret range (^1.7) which allows minor updates — verify the package owner and release history before running in production.
Credentials
The skill declares no required environment variables or credentials. It documents an optional WEIXIN_MCP_DIR to control where sensitive login tokens (accounts/<id>.json) are stored. The sensitivity of these locally stored tokens and the risk of sending them to external webhooks are correctly called out in the docs.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. It may start a user-level daemon (weixin-mcp) if the agent runs the provided start commands, which is consistent with the stated purpose.
Assessment
This skill appears coherent and behaves as a thin wrapper around the third-party weixin-mcp CLI, but take these precautions before installing or running it: 1) Understand npx will fetch and execute code from the npm registry — inspect the package page, GitHub repo, recent releases, and the package author (bkmashiro) before use. 2) Tokens are stored locally in accounts/<id>.json; treat those files as sensitive and set WEIXIN_MCP_DIR to an isolated directory if desired. 3) Do NOT point webhooks at public/external URLs — SKILL.md warns that webhooks can include a 'context_token' and message content; use localhost or internal endpoints only. 4) Consider running the first login and daemon in a sandboxed or non-privileged environment (separate user or container). 5) Verify the package version you intend to run (the skill metadata has minor version references mismatch) and prefer pinned, audited releases. If you need higher assurance, review the weixin-mcp source code on GitHub and the npm package contents before allowing the agent to invoke it.Like a lobster shell, security has layers — review code before you run it.
latestvk9775jq7w0ne4jhehgn87r5mtx83d6ad
License
MIT-0
Free to use, modify, and redistribute. No attribution required.