WeChat Sender Windows
v1.0.1微信消息自动发送工具(Windows 版)。通过 pywinauto 控制微信窗口,搜索联系人并发送消息。支持单发和群发。
⭐ 1· 81·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the implementation: the script uses pywinauto to find a WeChat window and send messages. Declared dependencies (Python + pywinauto) align with the code. Minor oddity: the code hardcodes candidate PIDs ([8620, 13472, 8]) and a specific Qt window class; this is brittle but explainable for targeting some local WeChat instances, not an indicator of unrelated capability.
Instruction Scope
SKILL.md instructs running the included script and installing pywinauto. The runtime instructions and code limit themselves to UI automation (setting focus, sending keys) and do not read environment variables, external files, or send network requests. Note: the skill will simulate keystrokes and change window focus — this can cause unintended input to other applications if the WeChat window is not properly focused/visible.
Install Mechanism
No install spec (instruction-only) and no downloaded code; only a bundled Python script is included. The only required external package is pywinauto installed via pip, which is proportional. No external URLs or archive extraction are used.
Credentials
No environment variables, credentials, or config paths are requested or accessed. The script does not attempt to read secrets or system configuration beyond connecting to local GUI windows.
Persistence & Privilege
The skill does not request persistent presence (always=false), does not modify other skills or global agent configuration, and runs only when invoked. Autonomous invocation is allowed by default on the platform but that is standard and not elevated here.
Assessment
This skill appears to do what it says: it automates the WeChat desktop client by simulating keypresses. Before installing or running it: 1) Review the send_wechat.py source yourself (or have someone you trust review it). 2) Run it on a Windows machine with a disposable/test WeChat account first — it will move focus and type/send messages, which can cause accidental input to other apps if the WeChat window is not visible. 3) Be aware the code uses hard-coded PID candidates and a specific Qt class name, so it may fail on your machine; this is a sign of brittleness, not necessarily malice. 4) The SKILL.md advertises contacting a WeChat account (boy1234) for a paid 'advanced' version — treat that as unsolicited contact information and avoid sending credentials. 5) Note the registry owner ID and _meta.json owner string differ; if provenance matters, ask the publisher for source/origin before trusting the package in production.Like a lobster shell, security has layers — review code before you run it.
latestvk97e0f33jx5ymcgbrm9d1nm3n984sdhe
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
