Wechat Publisher Skill

Automatically collects AI news, formats in HTML block layout v3.0, and publishes 32 news items to WeChat public account draft with scheduling and deduplication.

Key things to consider before installing: - Don’t trust the registry metadata alone: this skill actually needs your WeChat AppID and AppSecret but the registry lists no required credentials — confirm with the publisher before supplying secrets. - Inspect publish.py fully (and run it in a sandbox) to see every network endpoint it calls. It legitimately calls api.weixin.qq.com for tokens, but the docs also instruct use of ip-api.com and include diagnostic scripts that may reveal secrets; verify there are no hidden remote endpoints or telemetry to unknown hosts. - Never hard-code AppSecret/AppID into scripts or store them in world-readable files. If you must use this skill, prefer storing secrets in a secure vault or environment variables and restrict file permissions on config files. - The docs recommend reading/creating files under D:\news and memory/ — check what local files the skill will read to ensure it won't accidentally exfiltrate unrelated data. - Template/setting inconsistencies (block-v3 vs v5-simple, news_count 32 vs 15) suggest sloppy packaging — ask the maintainer for a canonical source (GitHub repo or official homepage) and a clear security/privacy statement. - If you want to proceed for testing: run the skill in an isolated environment or sandbox, restrict outbound network access to only api.weixin.qq.com and the WeChat media endpoints, and monitor file writes/reads and network connections. If you need, I can: (1) point out specific lines in publish.py to inspect further, (2) produce a minimal checklist to sandbox and test the skill safely, or (3) draft a short message you can send to the maintainer requesting clarification about credentials, telemetry, and template/version mismatches.

Type: OpenClaw Skill Name: wechat-publisher-easy Version: 2.0.3 The skill bundle is a functional tool designed to automate the collection and publication of AI-related news to WeChat Official Account drafts. It includes a well-structured workflow for an AI agent to perform news gathering, deduplication, and HTML formatting using the provided 'v5-simple.html' template. While the skill implements a commercial monetization model (8.8 RMB for a 'professional' version) and a local trial-usage counter (50 uses), the Python script 'publish.py' uses standard libraries and communicates only with official WeChat API endpoints. No evidence of data exfiltration, malicious code execution, or harmful prompt injection was found in the provided files.