Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Wechat Openclaw Skill

v1.0.0

提供微信中一键安装并绑定OpenClaw助手,实现多会话管理和文本、图片、文件等消息的微信端AI聊天功能。

0· 72·0 current·0 all-time
by兮颜@ynxiyan

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for ynxiyan/wechat-openclaw-skill.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Wechat Openclaw Skill" (ynxiyan/wechat-openclaw-skill) from ClawHub.
Skill page: https://clawhub.ai/ynxiyan/wechat-openclaw-skill
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install wechat-openclaw-skill

ClawHub CLI

Package manager switcher

npx clawhub@latest install wechat-openclaw-skill
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description claim an 'official' WeChat integration and include expected commands (openclaw CLI, npx install of @tencent-weixin/openclaw-weixin-cli). The requested artifacts (install and check scripts, QR pairing flow) align with the described purpose. However metadata lacks a homepage/source repository and the registry owner is an opaque ID, so the claim of being 'official' is not independently verifiable from the package metadata included here.
Instruction Scope
SKILL.md and the included scripts instruct the agent/user to run local Node scripts and openclaw CLI commands, generate a QR code for binding, and check OpenClaw/gateway status. The scripts only reference local filesystem paths under the skill directory (reports, save report files) and execute shell commands (openclaw, npx, npm, dns.resolve). They do not read arbitrary system files, request environment variables, or post data to hidden endpoints. They do execute external commands which is expected for an installer.
Install Mechanism
There is no automated install spec, but the runtime flow uses npx -y @tencent-weixin/openclaw-weixin-cli@latest and openclaw CLI commands. npx will fetch and execute a package from the public npm registry — this is expected for installing a plugin but does pull remote code at runtime. The skill's included scripts themselves are local and not obfuscated, and there are no direct downloads from unknown URLs inside the provided files.
Credentials
The skill does not request environment variables, credentials, or config paths beyond running the openclaw CLI and writing reports under the skill directory. The lack of requested secrets is proportionate to the described function (plugin install and QR binding).
Persistence & Privilege
Flags show always:false and normal autonomous invocation settings. The skill does not request permanent system-wide privileges or modify other skills' configs in the provided code (it runs openclaw config commands, which is appropriate for plugin enablement).
What to consider before installing
What to consider before installing: - The package claims an 'official' WeChat/OpenClaw integration but the skill metadata has no homepage or source repo—verify the maintainer and project on npm/GitHub before running anything. - The installer uses npx and openclaw CLI commands; npx will fetch and execute code from the npm registry at install time. Only proceed if you trust the @tencent-weixin/openclaw-weixin-cli package and its publisher. - Inspect the npm package (and its GitHub repo if present) for recent activity, publisher identity, and source code. Prefer installing packages from known orgs/accounts. - Run the scripts in an isolated environment (container or VM) or with a non-privileged user. Back up your OpenClaw config (~/.openclaw/config.json) before running enable/modify commands. - The provided scripts call exec() to run shell commands (openclaw, npx, npm) and will write a report under the skill directory; that behavior is expected but means the installer can run arbitrary CLI commands — review the commands or run them manually if unsure. - If you cannot verify the package provenance, consider manually following the SKILL.md steps (install OpenClaw, run openclaw plugins install from known sources, generate pairing QR) rather than running npx or the bundled install script blindly.
scripts/check.js:248
Shell command execution detected (child_process).
scripts/install.js:400
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97842zw9jcjy8pn2ew3caxh4h85a8jd
72downloads
0stars
1versions
Updated 6d ago
v1.0.0
MIT-0

微信集成OpenClaw技能

描述

基于B站视频《终于可以在微信中和你的 OpenClaw 聊天了,保姆级一键安装教程》的学习,提供完整的微信集成OpenClaw解决方案。实现一键安装、扫码绑定、微信聊天功能。

适用场景

  • 想在微信中直接使用OpenClaw助手
  • 需要手机随时随地访问AI助手
  • 希望简化OpenClaw使用流程
  • 需要官方稳定的微信集成方案

核心功能

1. 一键安装

  • 自动检测系统环境
  • 一键安装微信插件
  • 自动配置OpenClaw集成
  • 支持Windows/Mac/Linux

2. 扫码绑定

  • 生成微信绑定二维码
  • 支持个人微信扫码
  • 自动完成授权绑定
  • 验证连接状态

3. 微信聊天

  • 在微信中直接对话
  • 支持文本、图片、文件
  • 保持OpenClaw所有功能
  • 多会话上下文管理

4. 管理工具

  • 连接状态监控
  • 插件管理
  • 故障排查
  • 更新维护

使用方法

快速开始

# 运行一键安装
node scripts/install.js

# 或使用官方命令
npx -y @tencent-weixin/openclaw-weixin-cli@latest install

详细步骤

  1. 检查微信版本(需8.0.70+)
  2. 运行安装脚本
  3. 扫描生成的二维码
  4. 在微信中开始聊天

系统要求

软件要求

  • 微信版本: 8.0.70 或更高
  • OpenClaw: 2026.4.0 或更高
  • Node.js: 18.0.0 或更高
  • 操作系统: Windows 10+/macOS 11+/Linux

网络要求

  • 稳定的互联网连接
  • 能够访问微信服务器
  • OpenClaw网关正常运行

文件结构

wechat-openclaw-skill/
├── SKILL.md                    # 技能说明
├── scripts/                    # 安装脚本
│   ├── install.js             # 一键安装脚本
│   ├── check.js               # 环境检查脚本
│   └── monitor.js             # 连接监控脚本
├── configs/                   # 配置文件
│   └── wechat-config.json     # 微信插件配置
├── docs/                      # 文档
│   └── WEIXIN-GUIDE.md        # 完整集成指南
└── examples/                  # 示例
    └── usage-example.js       # 使用示例

安装流程

步骤1: 环境检查

node scripts/check.js

步骤2: 安装插件

node scripts/install.js

步骤3: 扫码绑定

  1. 运行安装脚本生成二维码
  2. 打开微信扫描二维码
  3. 确认授权绑定
  4. 验证连接成功

步骤4: 开始使用

  1. 在微信中找到"微信 ClawBot"
  2. 开始对话
  3. 使用OpenClaw所有功能

常见问题

Q1: 微信版本不够新怎么办?

A: 前往微信设置 → 关于微信 → 检查更新,升级到8.0.70或更高版本。

Q2: 安装失败怎么办?

A: 尝试备用安装命令:

openclaw plugins install "@tencent-weixin/openclaw-weixin"

Q3: 扫码后无法连接?

A: 检查OpenClaw网关是否运行:

openclaw gateway status
openclaw gateway start

Q4: Windows用户遇到问题?

A: Windows用户使用:

openclaw plugins install "@tencent-weixin/openclaw-weixin"
openclaw config set plugins.entries.openclaw-weixin.enabled true
openclaw channels login --channel openclaw-weixin

高级功能

多账号支持

  • 支持多个微信账号绑定
  • 每个账号独立会话上下文
  • 账号间互不干扰

消息类型

  • 文本消息
  • 图片消息
  • 文件传输
  • 语音消息(如支持)

安全特性

  • 官方插件,安全可靠
  • 扫码授权,无需密码
  • 会话加密传输
  • 权限控制

监控和维护

连接监控

node scripts/monitor.js

插件管理

# 查看插件状态
openclaw plugins list

# 更新插件
openclaw plugins update "@tencent-weixin/openclaw-weixin"

# 禁用插件
openclaw config set plugins.entries.openclaw-weixin.enabled false

日志查看

# 查看连接日志
openclaw logs --channel openclaw-weixin

# 查看错误日志
openclaw logs --level error

学习资源

视频教程

官方文档

社区支持

版本

  • 1.0.0: 初始版本,基于B站视频学习
  • 最后更新: 2026-04-18

许可证

基于MIT许可证开源,遵循微信开放平台规范。

致谢

  • 感谢微信官方提供OpenClaw插件
  • 感谢B站UP主的详细教程
  • 感谢OpenClaw开发团队和社区

Comments

Loading comments...