微信公众号文章抓取

Fetch complete content from WeChat public account articles (mp.weixin.qq.com). Use when extracting content from WeChat official account links, especially whe...

This skill mostly does what it says (fetch and extract WeChat article HTML), but the included Python script will fetch any http(s) URL you pass it — not just mp.weixin.qq.com. That creates a potential SSRF/internal-network access risk (e.g., accessing 169.254.169.254, localhost, or other internal services) if an attacker or misconfigured agent supplies a URL. Before installing or using this skill: - Treat it as capable of making arbitrary outbound HTTP requests. Run it in a network-isolated/sandboxed environment if you will pass untrusted URLs. - Prefer a patched version that enforces an allowlist (e.g., require hostname endswith "mp.weixin.qq.com" or a configured set of domains) and rejects IP literals, localhost, and private RFC1918 addresses. - Consider adding hostname resolution checks and preventing connections to private/internal ranges. - Audit and pin the Python dependencies from PyPI before installing. If you only intend to fetch WeChat articles, request or make a small change: enforce domain validation in validate_url or wrap the script so only permitted hostnames are accepted.

Type: OpenClaw Skill Name: ye-weixin-web-fetch Version: 1.0.0 The skill is a legitimate tool designed to fetch and parse WeChat public account articles into Markdown format. The Python script `scripts/weixin_fetch.py` uses standard libraries (httpx, readability-lxml) to perform HTTP requests and HTML parsing, with specific logic to handle WeChat's unique content structure and anti-bot headers, and contains no evidence of data exfiltration, malicious execution, or prompt injection.