微信公众号文章解析

Extract metadata and content from WeChat Official Account articles. Use when user needs to parse WeChat article URLs (mp.weixin.qq.com), extract article info...

This package generally does what it claims — it fetches WeChat article pages and extracts metadata — but it uses new Function(...) to execute JavaScript pulled from remote pages. That makes it risky to run on untrusted input because the evaluated code could be malicious or cause resource abuse. Before installing or running: 1) Review/grep the scripts for use of new Function / eval and consider replacing evaluation with safer static parsing where possible. 2) Run npm install and npm audit locally; pin dependencies and inspect transitive deps. 3) Run the skill inside an isolated sandbox/container with restricted network egress and limited CPU/memory. 4) Do not feed it URLs that contain sensitive tokens or that point to internal resources. 5) If you need stronger assurance, ask the author for a version that avoids executing remote JS or provide a minimal repro showing why evaluation is necessary. If you cannot sandbox it, treat it as high-risk.

Type: OpenClaw Skill Name: wechat-article-extractor-skill Version: 1.0.1 The skill is classified as suspicious primarily due to a critical Remote Code Execution (RCE) vulnerability in `scripts/extract.js`. It uses `new Function()` to execute JavaScript code snippets extracted directly from untrusted HTML content (WeChat articles). While the apparent intent is to parse embedded metadata, this method allows an attacker to craft a malicious WeChat article that, when processed by the skill, could execute arbitrary Node.js code on the host system if the environment is not sufficiently sandboxed. Additionally, the skill relies on the deprecated `request-promise` library, which poses a maintenance and potential security risk, and the URL validation for network requests could potentially be bypassed, leading to Server-Side Request Forgery (SSRF) if not handled carefully by the underlying `request` library.