Skillv1.0.1

ClawScan security

Wechat Forward · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignApr 27, 2026, 2:50 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill's requirements and runtime instructions align with its stated purpose (forwarding conversation content to the user's own WeChat via the wxclawbot CLI); nothing requested appears disproportionate or unrelated.
Guidance: This skill appears coherent for forwarding chat content to your own WeChat using the local wxclawbot CLI. Before installing/use: (1) ensure wxclawbot is trustworthy and installed from a known source; (2) confirm the accounts directory (~/.openclaw/openclaw-weixin/accounts/) contains only your own credentials; (3) be cautious when asking the agent to "send file" — that will read local file paths you specify and forward them to your phone; (4) verify the agent actually respects the listed trigger phrases and does not auto-trigger; (5) review wxclawbot logs if you need auditability. If any of these items are unclear or you do not trust wxclawbot, do not enable the skill.

Purpose & Capability: okName/description claim: forward conversation to the user's WeChat. Declared requirements (wxclawbot binary, accounts config path) and CLI-based instructions directly support that purpose and are expected.
Instruction Scope: noteSKILL.md instructs the agent to call wxclawbot send --text and optionally --file. It specifies explicit trigger phrases and disallows automatic triggers, but enforcement depends on the agent following the instructions. The ability to send arbitrary local files (via --file) is intentional for attachments but means a user-initiated request could cause local files to be read and forwarded to the user's phone.
Install Mechanism: okInstruction-only skill with no install spec or code files — lowest install risk. It requires an existing wxclawbot CLI on PATH (reasonable and consistent).
Credentials: okNo environment variables requested. The only declared config path (~/.openclaw/openclaw-weixin/accounts/) is the user's local/wechat credentials store required for sending to the user's WeChat — proportional to the stated function.
Persistence & Privilege: okalways:false and no persistent installs or system-wide modifications. The skill does not request elevated or always-on privileges.