wechat-style-publisher

支持多账号微信公众号发布，提供自定义文章主题、文章开头/结尾模板。当用户需要将带样式的文章发布到一个或多个微信公众号时使用此工具。

This skill appears to do what it claims, but take these precautions before use: - Protect your WeChat credentials: the scripts expect appId/appSecret in a JSON config file (config.example provided). Store that file securely and avoid committing it to VCS. - The skill writes token cache and template registry files to disk (tokenCacheDir, registry paths). Be aware where those files live and restrict access. - The import tools fetch arbitrary article URLs (or read local HTML) when you ask; only import content from trusted sources. The importers remove <script> tags, but you should still review imported templates before publishing. - There is no installer; running the Node/Python scripts will execute bundled code. Review the code (included) and install Node >=18 and Python dependencies (requirements.txt) in an isolated environment before running. - Confirm the apiBaseUrl is correct (defaults to api.weixin.qq.com) and that your app credentials have only the minimum permissions needed. If you want, I can point out the exact lines where credentials are read/written and where network requests occur.

Type: OpenClaw Skill Name: wechat-style-publisher Version: 1.0.0 The skill bundle provides a legitimate set of tools for formatting and publishing articles to WeChat Official Accounts. It includes Node.js and Python scripts for applying CSS themes, extracting templates from existing articles (via URL or local file), and managing multi-account publishing workflows. While the scripts handle sensitive WeChat API credentials (appId/appSecret) and perform network requests, these actions are necessary for the stated functionality and are directed to the official WeChat API endpoints. No evidence of data exfiltration, malicious execution, or prompt injection was found across the codebase (e.g., scripts/publish-node.mjs, scripts/import-template-python.py).