Wxpush

v0.1.1

微信模板消息推送 skill。支持三种 wxpush API 格式:edgeone(默认)、wxpush(frankiejun 项目)、go-wxpush。使用场景:发送微信推送消息、配置 wxpush 环境。

1· 164·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for shisheng820/wxpush.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Wxpush" (shisheng820/wxpush) from ClawHub.
Skill page: https://clawhub.ai/shisheng820/wxpush
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: curl, python3
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install wxpush

ClawHub CLI

Package manager switcher

npx clawhub@latest install wxpush
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, required binaries (curl, python3), and the documented behaviors align: reading a local config and sending HTTP requests to a wxpush endpoint is expected for this skill. One small note: the SKILL.md expects a config file at ~/.config/wxpush/wxpush.env (containing tokens/AppID/Secret) even though no required env vars were declared — this is reasonable for an instruction-only skill but worth noting.
Instruction Scope
Instructions confine themselves to creating/reading ~/.config/wxpush/wxpush.env and performing HTTP POST/GET to the configured WXPUSH_API_URL using curl (or Python fallback). They do not attempt to read other system files or unrelated environment variables. Important security implication: the instructions explicitly send AppID/Secret/Token to the configured endpoint (and by default to documented third‑party endpoints), so secrets in the local config will be transmitted to remote services.
Install Mechanism
No install spec and no code files — this is instruction-only and does not write or execute bundled binaries. Lowest install risk.
Credentials
The skill requests no platform environment variables but directs the user/agent to store sensitive values in ~/.config/wxpush/wxpush.env (token, appid, secret). That is proportionate to the functionality, but storing secrets in a local file and transmitting them to remote endpoints (especially the default third‑party endpoints) is the main risk vector and should be considered before use.
Persistence & Privilege
always is false and there is no attempt to modify other skills or system settings. The skill is user-invocable and can be run autonomously by the agent (the platform default) — not a standalone concern here.
Assessment
This skill appears to do what it says: it reads/writes ~/.config/wxpush/wxpush.env and sends messages to a configured HTTP endpoint using curl or python. Before installing or using it: (1) Understand that your WXPUSH_API_TOKEN, WXPUSH_APPID and WXPUSH_SECRET (if set) will be sent to the configured endpoint — the default endpoints mentioned in the docs are third‑party services; only use them if you trust those operators. (2) If you have security/privacy concerns, deploy your own server and set WXPUSH_API_URL to your instance. (3) Keep the config file permissions restrictive (the docs suggest 600) and avoid putting other secrets there. (4) Because this is instruction-only, there's no bundled code to review — the runtime actions are exactly those in SKILL.md; review those curl/python snippets to confirm they meet your policies. (5) Allow agent/autonomous invocation only if you are comfortable the agent may send test messages using stored credentials.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

💬 Clawdis
Binscurl, python3
latestvk974q9ggfcry8aj0dmrncdpzx183epv3
164downloads
1stars
2versions
Updated 1mo ago
v0.1.1
MIT-0

WXPush Skill

微信模板消息推送,支持三种 API 格式切换(对应三个不同项目)。

配置

配置文件:~/.config/wxpush/wxpush.env

WXPUSH_API_URL=https://your-service.com    # 服务地址
WXPUSH_API_TOKEN=your_token                # API Token(edgeone 可选,wxpush 必填,go-wxpush 留空)
WXPUSH_MODE=edgeone                        # API 模式: edgeone | wxpush | go-wxpush
WXPUSH_APPID=wx_appid                      # 微信 AppID(go-wxpush 必填)
WXPUSH_SECRET=wx_secret                    # 微信 Secret(go-wxpush 必填)
WXPUSH_USERID=openid1|openid2              # 默认接收用户
WXPUSH_TEMPLATE_ID=template_id             # 模板 ID
WXPUSH_SKIN=                               # 皮肤(可选,edgeone 原生支持)
WXPUSH_BASE_URL=                           # 跳转 URL(可选)

如配置文件不存在,引导用户创建:询问 mode、token、wx 配置等,写入 ~/.config/wxpush/wxpush.env 并设权限 600。

配置完成后,务必发送一条测试消息以确认配置正确。

发送消息

读取 ~/.config/wxpush/wxpush.env,根据 mode 选择 curl 或 Python 发送请求。

优先使用 curl(最简洁),不可用时用 Python(标准库,无需额外依赖)。

edgeone 模式(默认)

# curl
curl -s -X POST "${WXPUSH_API_URL}/wxsend" \
  -H "Content-Type: application/json" \
  -d "{\"title\":\"标题\",\"content\":\"内容\",\"token\":\"${WXPUSH_API_TOKEN}\"}"

# Python(标准库,无需安装)
python3 -c "
import json, os, sys
from urllib.request import Request, urlopen
cfg = {k.strip(): v.strip() for k, _, v in (l.partition('=') for l in open(os.path.expanduser('~/.config/wxpush/wxpush.env')) if '=' in l and not l.startswith('#'))}
data = json.dumps({'title': sys.argv[1], 'content': sys.argv[2], 'token': cfg.get('WXPUSH_API_TOKEN','')}).encode()
req = Request(cfg.get('WXPUSH_API_URL','').rstrip('/') + '/wxsend', data=data, headers={'Content-Type':'application/json'})
print(urlopen(req, timeout=15).read().decode())
" "标题" "内容"

wxpush 模式

# curl
curl -s -X POST "${WXPUSH_API_URL}/wxsend" \
  -H "Authorization: ${WXPUSH_API_TOKEN}" \
  -H "Content-Type: application/json" \
  -d "{\"title\":\"标题\",\"content\":\"内容\"}"

# Python
python3 -c "
import json, os, sys
from urllib.request import Request, urlopen
cfg = {k.strip(): v.strip() for k, _, v in (l.partition('=') for l in open(os.path.expanduser('~/.config/wxpush/wxpush.env')) if '=' in l and not l.startswith('#'))}
data = json.dumps({'title': sys.argv[1], 'content': sys.argv[2]}).encode()
req = Request(cfg.get('WXPUSH_API_URL','').rstrip('/') + '/wxsend', data=data, headers={'Content-Type':'application/json','Authorization':cfg.get('WXPUSH_API_TOKEN','')})
print(urlopen(req, timeout=15).read().decode())
" "标题" "内容"

go-wxpush 模式

# curl
curl -s -X POST "${WXPUSH_API_URL}/wxsend" \
  -H "Content-Type: application/json" \
  -d "{\"title\":\"标题\",\"content\":\"内容\",\"appid\":\"${WXPUSH_APPID}\",\"secret\":\"${WXPUSH_SECRET}\",\"userid\":\"${WXPUSH_USERID}\",\"template_id\":\"${WXPUSH_TEMPLATE_ID}\"}"

# Python
python3 -c "
import json, os, sys
from urllib.request import Request, urlopen
cfg = {k.strip(): v.strip() for k, _, v in (l.partition('=') for l in open(os.path.expanduser('~/.config/wxpush/wxpush.env')) if '=' in l and not l.startswith('#'))}
data = json.dumps({'title': sys.argv[1], 'content': sys.argv[2], 'appid': cfg.get('WXPUSH_APPID',''), 'secret': cfg.get('WXPUSH_SECRET',''), 'userid': cfg.get('WXPUSH_USERID',''), 'template_id': cfg.get('WXPUSH_TEMPLATE_ID','')}).encode()
req = Request(cfg.get('WXPUSH_API_URL','').rstrip('/') + '/wxsend', data=data, headers={'Content-Type':'application/json'})
print(urlopen(req, timeout=15).read().decode())
" "标题" "内容"

三种 API 格式差异

特性edgeonewxpushgo-wxpush
对应项目shisheng820/WXPush-edgeonefrankiejun/wxpushhezhizheng/go-wxpush
默认地址https://wxpush.hunluan.space无(自填)https://push.hzz.cool
token可选必填
token 传递方式query / body / headerquery / header
wx 配置无 token 时必填服务端有默认值必填(无默认值)
skin原生支持需配合 wxpushSkin需配合 wxpushSkin
独有参数tz(时区)
成功响应标准微信响应{msg: "Successfully sent..."}{errcode: 0}

mode 选择指南

  • edgeone:默认地址 https://wxpush.hunluan.space,支持有/无 token 两种方式
  • wxpush:需自填服务地址,必须配置 token,wx 配置在服务端
  • go-wxpush:默认地址 https://push.hzz.cool,无 token,每次调用必须传完整 wx 配置

详细 API 文档

根据用户选择的 mode,加载对应 reference 文件:

皮肤列表(edgeone 原生支持)

MacOS_Hacker_Theme-LGT、aurora-glass、cyberpunk、hacker-dark、minimalist-light、ocean-breeze、quiet-night、sakura、sunset-glow、terminal-neon、warm-magazine

安全提示

  • 默认端点(wxpush.hunluan.spacepush.hzz.cool)为第三方服务,AppID/Secret/Token 会发送至对应服务
  • 如不信任默认端点,请自行部署服务并设置 WXPUSH_API_URL
  • 配置文件权限建议设为 600(仅当前用户可读写)

Comments

Loading comments...