技能详情(站内镜像,无评论)
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v1.3.0
统计:⭐ 0 · 25 · 0 current installs · 0 all-time installs
⭐ 0
安装量(当前) 0
🛡 VirusTotal :良性 · OpenClaw :可疑
Package:beneclaw/article-factory-wechat
安全扫描(ClawHub)
- VirusTotal :良性
- OpenClaw :可疑
OpenClaw 评估
The skill's functionality (WeChat article production + automatic submission) matches the included scripts, but the package/registry metadata omits the credential/config requirements declared in SKILL.md and the runtime instructions encourage broad automatic use — review code (especially submit-draft.js) and the credential handling before installing.
目的
The declared purpose (full WeChat article workflow including submitting drafts) is consistent with the shipped scripts (temp-convert.js, submit-draft.js, humanize/detect/style scripts) and npm dependencies (puppeteer). However the registry metadata lists no required environment variables or config paths while the SKILL.md explicitly requires WECHAT_APPID and WECHAT_APPSECRET to be stored in ~/.openclaw/env and instructs adding the server IP to…
说明范围
SKILL.md contains detailed runtime instructions that stay within the stated purpose (collect, humanize, render HTML to images, and submit drafts). Two notable items: (1) it tells the agent to '立即使用此技能' when users mention article-related topics — a broad trigger phrase that may cause frequent/automatic invocation; (2) it mandates storing credentials in ~/.openclaw/env and running detection/humanize scripts every time. Both are within scope for the skill's goal, but give the skill broad discretion and require access to a credentials file — the agent or operator should confirm how those credentials are read and protected.
安装机制
There is no platform-level install spec, but SKILL.md instructs running `npm install` in the skill folder. package.json depends on puppeteer and commander (both from npm). This is a typical Node-based install; note that puppeteer downloads browser binaries and may require Node >= 18 (some puppeteer/browser packages in package-lock indicate Node >=18). No external arbitrary download URLs or obscure installers were observed in the provided files.
证书
The SKILL.md legitimately requires WECHAT_APPID and WECHAT_APPSECRET (which are proportional to a skill that submits drafts via the WeChat API). However, the registry metadata advertised to the platform lists no required env vars nor required config paths — this is inconsistent. The SKILL.md also specifies a concrete filesystem location (~/.openclaw/env) for credentials, which implies the skill will read that file at runtime; the metadata shou…
持久
The skill is not marked always:true and does not request special system privileges. It does instruct adding the runtime server IP to the WeChat IP whitelist (expected for WeChat API calls). One operational note: SKILL.md tells the agent to 'immediately use' this skill when users mention related topics — combined with normal autonomous invocation this could lead to more frequent automatic activations than a user expects. This is behavioral (inv…
scripts/submit-draft.js:15
环境变量访问与网络发送相结合。
scripts/submit-draft.js:24
文件读取与网络发送相结合(可能泄露)。
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「微信公众号文章生产SOP」。简介:微信公众平台文章全流程生产工具,涵盖选题、调研、撰写、去AI味、生成配图、HTML排版及提交草稿七个标准步骤。。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/beneclaw/article-factory-wechat/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
暂无本地缓存内容,可在后台执行详情同步。