Wechat Mp To Notion

Fetch WeChat public account (微信公众号) articles from mp.weixin.qq.com links and save them into Notion as structured pages. Use when the user wants to archive a...

This skill appears to do what it says: download a public WeChat article and create a Notion page. Before installing: (1) be aware you must provide a Notion token (NOTION_API_KEY or NOTION_TOKEN). The registry metadata currently omits this — ask the publisher to declare the required env var and primary credential. (2) Only grant the token the minimal scope needed for creating pages and ensure the target page/database is shared with the integration. (3) Inspect the included Python script yourself (or have someone you trust do so) to confirm it matches your expectations; it performs network requests to mp.weixin.qq.com and api.notion.com and does not otherwise exfiltrate data. (4) If you plan to run this in a shared/production environment, prefer a token scoped to a dedicated Notion integration and not a broad user token.

Type: OpenClaw Skill Name: wechat-mp-to-notion Version: 0.1.0 The skill contains a potential security vulnerability in `scripts/save_wechat_mp_to_notion.py` where the `fetch` function uses `urllib.request.urlopen` on the `wechat_url` argument without any validation. This lack of input sanitization could allow for Server-Side Request Forgery (SSRF) or Local File Inclusion (LFI) if the AI agent is manipulated into providing a malicious URL (e.g., a `file://` or internal network path). While the script's logic for parsing WeChat articles and interacting with the Notion API appears legitimate and aligned with its stated purpose, the high-risk nature of unvalidated network/file access warrants a suspicious classification.