微信文章读取

读取微信公众平台文章内容（mp.weixin.qq.com）。当用户发送微信文章链接、需要读取微信文章内容、提取公众号文章时自动激活。支持突破微信反爬限制，获取完整文章文本。

This skill appears to do what it claims (fetch and parse WeChat article pages), but review these before installing: - Functional gaps: The script uses curl and beautifulsoup4 but the skill metadata does not declare curl as a required binary and the README suggests installing beautifulsoup4; ensure curl is available and pip-install the dependency before use. - Shell-injection risk: The script builds a curl command string including the user-provided URL and calls subprocess.run(..., shell=True). If a maliciously crafted URL is passed, it could execute arbitrary shell commands. Prefer a version that uses the requests library or subprocess.run([...], shell=False) with proper URL validation. - Legal/ethical: The skill explicitly aims to 'bypass anti-scraping' protections; check terms of service and legal constraints for scraping mp.weixin.qq.com and respect rate limits. - Hardening suggestions: Ask the author to (1) declare curl in required binaries, (2) replace shell-based curl calls with requests or a safe subprocess invocation, (3) validate/sanitize input URLs, and (4) optionally add timeout/error handling and user-agent comments in metadata. If you cannot vet the author or run the skill in a sandboxed environment, treat the shell-injection risk as a blocker for use with untrusted inputs.

Type: OpenClaw Skill Name: weixin-article-read Version: 1.0.0 The skill contains a critical shell injection vulnerability in `scripts/read_weixin_article.py`. The script uses `subprocess.run(shell=True)` to execute a `curl` command where the user-provided URL is directly interpolated into the command string without sanitization. While the script's logic is consistent with its stated purpose of fetching WeChat articles, this flaw allows for arbitrary command execution if a crafted URL is provided.