Wechat Blog Write Publish

基于用户提供的参考资料，自动创作并排版微信公众号文章，保存为 Markdown 并发布至公众号草稿箱。

This skill appears coherent for drafting and publishing WeChat articles, but before installing or running anything: 1) Verify the @wenyan-md/cli npm package and its source (GitHub repo, recent maintainers, license, and code) so you trust what the installer will run. 2) Be prepared to supply your WeChat AppID/AppSecret and add your machine's public IP to the official account IP whitelist — treat AppSecret like a password and do not share it. 3) When testing, use a non-critical/test official account or sandbox to confirm behavior (so accidental publishes or credential leaks don't affect a production account). 4) Avoid giving the tool access to sensitive local files you don't want uploaded. 5) If you need stronger assurance, review the wenyan-cli source code (or network traffic) to confirm it doesn't transmit credentials or data to unexpected endpoints and that it only calls the official WeChat API.

Type: OpenClaw Skill Name: wechat-blog-write-publish Version: 0.1.0 The skill automates WeChat article publishing by instructing the AI agent to install and use an external CLI tool (@wenyan-md/cli), which involves high-risk operations including global npm installations, shell command execution, and the handling of sensitive WeChat AppID and AppSecret credentials. While these actions are aligned with the stated purpose, the instructions in SKILL.md and README.md lack explicit input sanitization, potentially exposing the system to shell injection if article filenames or metadata are derived from untrusted reference materials. It also directs users to external services like ip.sb to retrieve network information.