Wechat Mcp

Windows 电脑端微信消息监控与发送 MCP，实现在微信上给指定联系人发送消息

Security Scan

The skill mostly implements Windows desktop automation for WeChat which matches its description, but the documentation and declared features do not fully match the shipped code and there are operational risks (e.g., FAILSAFE disabled, files written to disk) that you should review before installing.

Purpose & Capability

The package purpose (monitoring and sending WeChat messages on Windows) aligns with the code: pyautogui/pygetwindow/ImageGrab-based desktop automation. However SKILL.md and examples claim functions/features that are not present (e.g., send_message_to_contact and contact-search/open flow). requirements.txt also lists pytesseract even though server.py does not use it. These mismatches suggest the docs and code are out of sync.

Instruction Scope

Runtime instructions tell the agent to install Python GUI automation libs and call functions like send_message_to_contact, but the actual runtime entry points in server.py are send_message_to_current and get_wechat_status (no send_message_to_contact). The code performs GUI clicks, clipboard operations, and saves screenshots (verify.png, input_verify.png, result.png) to the skill directory — the SKILL.md does not clearly document the file writes. The skill does not access external networks or credentials, but the discrepancy between documented and implemented behavior is a scope/integrity problem.

Install Mechanism

There is no install spec (instruction-only), which is low risk. requirements.txt lists typical GUI automation packages. It also lists pytesseract (and the SKILL.md does not instruct installing Tesseract OCR engine), which may be unnecessary or missing a required external binary (tesseract.exe) on Windows — the README and instructions should clarify this dependency.

Credentials

The skill requests no environment variables or credentials and does not call external services. It does interact with the system GUI, clipboard (pyperclip), and filesystem (writes PNG files to the skill directory) which is proportionate to desktop automation but worth noting because these actions can leak or alter local data if misdirected.

Persistence & Privilege

The skill is not marked always:true and does not modify other skills or system-wide configs. It runs an stdin JSON-RPC loop when executed, which can autonomously perform GUI actions if invoked — this is expected for an MCP-style tool but increases impact if used without oversight.

Scan Findings in Context

[pyautogui.FAILSAFE_disabled] unexpected: server.py sets pyautogui.FAILSAFE = False. Disabling pyautogui's failsafe prevents aborting automation by moving the mouse to the corner, increasing the risk of runaway UI actions.

[doc_function_missing_in_code] unexpected: SKILL.md examples reference send_message_to_contact (search/open contact flow) but server.py does not implement that function; only send_message_to_current exists. This doc/code mismatch can mislead integrators or cause unexpected behavior.

[requirements_contains_unused_pytesseract] unexpected: requirements.txt includes pytesseract but server.py does not import or call it. pytesseract typically requires an external Tesseract binary that is not mentioned in the SKILL.md.

[writes_screenshots_to_disk] expected: server.py saves verify.png, input_verify.png, and result.png in the skill directory; SKILL.md mentions screenshots but does not explicitly state that files are written to disk. Writing screenshots is consistent with monitoring functionality, but users should expect these files to be created.

What to consider before installing

This skill automates your Windows desktop to send WeChat messages by simulating clicks and clipboard operations. Before installing or running it: - Review the code yourself (or ask the author) because SKILL.md claims a contact-search/send_message_to_contact flow that is not implemented; expect only send_message_to_current behavior. - Be aware the code disables pyautogui's FAILSAFE (pyautogui.FAILSAFE = False). Consider changing that to True to allow aborting automation by moving the mouse to a screen corner. - The skill writes screenshot files (verify.png, input_verify.png, result.png) into the skill directory — ensure that is acceptable for your environment. - requirements.txt lists pytesseract (and Tesseract requires a separate system binary). Confirm whether OCR is needed and install/enable it only if required. - Because this automates the GUI and clipboard, test in a safe environment (with a test WeChat account) to avoid sending messages to the wrong contact. If you need higher assurance, ask the publisher to: (1) fix the documentation to match implemented functions, (2) remove or justify unnecessary dependencies, (3) re-enable pyautogui failsafe or add an explicit emergency-stop mechanism, and (4) declare any files the skill will create.

Windows 电脑端微信消息监控与发送 MCP。

功能

• 📸 截取微信窗口截图
• 👤 搜索并打开联系人聊天窗口
• ✉️ 给指定联系人发送消息
• 🔍 支持独立聊天窗口识别和消息发送

安装

需要先安装 Python 依赖：

pip install pyautogui pygetwindow pillow pyperclip opencv-python

使用方法

1. 发送消息到指定联系人

from server import send_message_to_contact

# 给指定联系人发送消息（完整流程：搜索->打开聊天->发送）
send_message_to_contact("联系人名称", "消息内容")

2. 给当前聊天窗口发送消息

from server import send_message_to_current

# 给当前已打开的聊天窗口发送消息
send_message_to_current("消息内容")

3. 获取微信状态

from server import get_wechat_status

status = get_wechat_status()
print(status)
# {'status': 'running', 'title': '微信', 'position': {'x': 0, 'y': 0}, 'size': {'width': 1920, 'height': 1080}}

MCP 工具

如果通过 MCP 协议调用：

{
  "tools": [
    {
      "name": "wechat_get_status",
      "description": "获取微信窗口状态"
    },
    {
      "name": "wechat_send_message",
      "description": "给当前聊天窗口发送消息",
      "inputSchema": {
        "type": "object",
        "properties": {
          "message": {"type": "string", "description": "消息内容"}
        },
        "required": ["message"]
      }
    }
  ]
}

注意事项

1. 微信窗口需要保持打开状态
2. 发送消息时会自动激活微信窗口
3. 中文输入需要确保系统中文输入法正常工作
4. 支持给独立聊天窗口（单独打开的 Dragon 窗口）发送消息

文件结构

wechat-mcp/
├── server.py          # MCP 服务器主程序
├── test_wechat.py    # 测试工具
├── requirements.txt   # Python 依赖
└── README.md         # 说明文档