Security checks across malware telemetry and agentic risk
This skill is a coherent WeChat-to-Claude installer, but it enables a persistent chat-controlled local agent with broad file and command access, so users should review it carefully before installing.
Install only if you intentionally want a persistent WeChat-controlled bridge into Claude Code. Use a dedicated WeChat account, avoid work or sensitive chats, review the upstream repository before running npm install, do not store API keys in plaintext plist files if you can avoid it, and disable or uninstall the LaunchAgent when you are not actively using the bridge.
with open(p, 'rb') as f: d = plistlib.load(f)
env = d.setdefault('EnvironmentVariables', {})
env['ANTHROPIC_AUTH_TOKEN'] = 'sk-ant-api03-你的key'
env['ANTHROPIC_BASE_URL'] = 'https://api.anthropic.com/v1/'
with open(p, 'wb') as f: plistlib.dump(d, f)
print("done")
PY报告：Node 版本、是否已装、是否已绑、`ANTHROPIC_BASE_URL` 合规风险、OS 平台。 **重点关注 4️⃣**：如果 `ANTHROPIC_BASE_URL` 指向本地代理（公司 LLM 网关），**所有微信对话会经此代理进入公司日志**——聊私事前请改 plist 切回个人 Anthropic 账号。 ### 第 1-2 步：一键安装（含扫码）
|---|---| | `fix-cwd.sh "$HOME/Claude Code"` | 坑 1：直接改 session.json | | `fix-meta-talk.sh ["自定义 prompt"]` | 坑 2：覆盖 systemPrompt | | `fix-caffeinate.sh` | 坑 3：plist 加 `caffeinate -i` | ### 第 4 步：起 daemon + 验证
cd ~/.claude/skills/wechat-claude-code && npm run daemon -- stop # 永久关（重启后也不起；修第 5 个坑） launchctl unload -w ~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist # 重新启用 launchctl load -w ~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist
launchctl unload -w ~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist # 重新启用 launchctl load -w ~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist ``` ## 切换 API 端点（避开公司代理）
launchctl unload -w ~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist # 重新启用 launchctl load -w ~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist ``` ## 切换 API 端点（避开公司代理）
如果 doctor 报告 `ANTHROPIC_BASE_URL` 指向公司代理，且不希望微信对话经过公司日志：
```bash
PLIST=~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist
python3 <<'PY'
import plistlib, os
p = os.path.expanduser("~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist")如果 doctor 报告 `ANTHROPIC_BASE_URL` 指向公司代理，且不希望微信对话经过公司日志：
```bash
PLIST=~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist
python3 <<'PY'
import plistlib, os
p = os.path.expanduser("~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist")```bash
PLIST=~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist
python3 <<'PY'
import plistlib, os
p = os.path.expanduser("~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist")
with open(p, 'rb') as f: d = plistlib.load(f)
env = d.setdefault('EnvironmentVariables', {})PLIST=~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist
python3 <<'PY'
import plistlib, os
p = os.path.expanduser("~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist")
with open(p, 'rb') as f: d = plistlib.load(f)
env = d.setdefault('EnvironmentVariables', {})
env['ANTHROPIC_AUTH_TOKEN'] = 'sk-ant-api03-你的key'python3 <<'PY'
import plistlib, os
p = os.path.expanduser("~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist")
with open(p, 'rb') as f: d = plistlib.load(f)
env = d.setdefault('EnvironmentVariables', {})
env['ANTHROPIC_AUTH_TOKEN'] = 'sk-ant-api03-你的key'
env['ANTHROPIC_BASE_URL'] = 'https://api.anthropic.com/v1/'env = d.setdefault('EnvironmentVariables', {})
env['ANTHROPIC_AUTH_TOKEN'] = 'sk-ant-api03-你的key'
env['ANTHROPIC_BASE_URL'] = 'https://api.anthropic.com/v1/'
with open(p, 'wb') as f: plistlib.dump(d, f)
print("done")
PY
launchctl unload ~/Library/LaunchAgents/com.wechat-claude-code.bridge.plistwith open(p, 'wb') as f: plistlib.dump(d, f)
print("done")
PY
launchctl unload ~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist
launchctl load ~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist
```print("done")
PY
launchctl unload ~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist
launchctl load ~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist
```
## 卸载print("done")
PY
launchctl unload ~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist
launchctl load ~/Library/LaunchAgents/com.wechat-claude-code.bridge.plist
```
## 卸载1. **微信账号风险**：iLink AI 是腾讯官方通道，封号风险极低；但建议**首次绑个人小号**。 2. **数据流向**：所有微信消息 → 本机 daemon → 你的 `ANTHROPIC_BASE_URL` → Claude。doctor 第 4 步会提醒。 3. **本机权限**：daemon 等同"坐在你电脑前的人"——能跑命令、读文件、改文件。**不要把绑定的微信号借给别人**。 4. **本 skill 不修改上游代码**，所有改动都在 launchd plist + session.json，可随时回滚。 5. 上游 1.0.0 还在迭代；本 skill 修法基于 1.0.0，未来版本可能不需要。 ## 参考
64/64 vendors flagged this skill as clean.