360 Secure SkillHub
360 安全技能中心

Openqq

面向 OpenClaw 的 QQ 机器人集成，通过 WebSocket 接入 QQ 机器人，对私聊和群聊 @ 消息做 AI 自动回复；按用户/群隔离会话，日志含敏感信息过滤与轮转，支持心跳重连、消息重试和优雅退出，并提供启动、健康检查、日志查看等 npm 命令。

Zaohon
Zaohon
热度 82.34
最近更新 2026-05-17 12:48:47
分类：自动化依赖：代码执行 / 读写文件 / 第三方 API / 内部调用大模型应用场景：自动化脚本 / 工作流

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add openqq
Metadata
name
openqq
description
QQ bot integration for OpenClaw with session isolation, logging, and AI auto-reply. Supports private chat and group @messages.

OpenQQ Bot

QQ bot integration for OpenClaw. Enables AI auto-reply for QQ private chats and group @mentions with session isolation and comprehensive logging.

Quick Start

# Initialize config
npm run setup

# Install dependencies
npm install

# Edit config
vim ~/.openclaw/workspace/open-qq-config.json

# Start bot
npm start

Configuration

Edit ~/.openclaw/workspace/open-qq-config.json:

{
  "qq": {
    "appId": "YOUR_APP_ID",
    "token": "YOUR_TOKEN",
    "appSecret": "YOUR_APP_SECRET"
  }
}

Get credentials from QQ Open Platform.

Usage

npm start        # Start bot
npm run health   # Health check
npm run logs     # View today's logs
npm run status   # Check running status

Features

  • Session Isolation: Each user/group has independent conversation history
    • Private: qq-private-{user_openid}
    • Group: qq-group-{group_openid}
  • Comprehensive Logging: China timezone, log rotation, sensitive data filtering
  • Auto Reconnect: WebSocket auto-reconnect with heartbeat
  • Message Retry: Auto-retry failed messages (up to 2 times)
  • Graceful Shutdown: Clean shutdown on SIGTERM/SIGINT

Files

File Description
qq-bot.js Main program (WebSocket + OpenClaw integration)
logger.js Logging system (China timezone + rotation)
scripts/health-check.sh Health check script
package.json Dependencies (axios, ws)

npm Commands

Command Description
npm start Start bot
npm run health Health check
npm run logs View logs
npm run setup Initialize config
npm run status Check status
npm run clean Clean node_modules

Security

  • Do not commit open-qq-config.json to version control
  • Set permissions: chmod 600 ~/.openclaw/workspace/open-qq-config.json
  • Uses spawn instead of exec to prevent command injection
  • Session IDs are whitelisted (alphanumeric + hyphen only)

Troubleshooting

Issue Solution
Config not found Run npm run setup
Missing credentials Edit config file with appId/token/appSecret
WebSocket failed Check Token and network
No reply Test with openclaw agent --message "test"

Changelog

See CHANGELOG.md

v0.0.3 (Latest)

  • 7 new npm commands
  • FAQ section
  • Message retry mechanism
  • Graceful shutdown

License

MIT License

Links