← Back to Skills Marketplace
abigale-cyber

WeChat Article Extractor

by Abigale-cyber · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
101
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install content-system-wechat-article-extractor-skill
Description
Extract metadata and content from WeChat Official Account articles. Use when user needs to parse WeChat article URLs (mp.weixin.qq.com), extract article info...
README (SKILL.md)

WeChat Article Extractor

Extract metadata and content from WeChat Official Account (微信公众号) articles.

Capabilities

  • Parse WeChat article URLs (mp.weixin.qq.com)
  • Extract article metadata: title, author, description, publish time
  • Extract account info: name, avatar, alias, description
  • Get article content (HTML)
  • Get cover image URL
  • Support multiple article types: post, video, image, voice, text, repost
  • Handle various error cases: deleted content, expired links, access limits

Usage

Basic Extraction from URL

const { extract } = require('./scripts/extract.js');

const result = await extract('https://mp.weixin.qq.com/s?__biz=...');
// Returns: { done: true, code: 0, data: {...} }

Extraction from HTML

const html = await fetch(url).then(r => r.text());
const result = await extract(html, { url: sourceUrl });

Options

const result = await extract(url, {
  shouldReturnContent: true,      // Return HTML content (default: true)
  shouldReturnRawMeta: false,     // Return raw metadata (default: false)
  shouldFollowTransferLink: true, // Follow migrated account links (default: true)
  shouldExtractMpLinks: false,    // Extract embedded mp.weixin links (default: false)
  shouldExtractTags: false,       // Extract article tags (default: false)
  shouldExtractRepostMeta: false  // Extract repost source info (default: false)
});

Response Format

Success Response

{
  done: true,
  code: 0,
  data: {
    // Account info
    account_name: "公众号名称",
    account_alias: "微信号",
    account_avatar: "头像URL",
    account_description: "功能介绍",
    account_id: "原始ID",
    account_biz: "biz参数",
    account_biz_number: 1234567890,
    account_qr_code: "二维码URL",

    // Article info
    msg_title: "文章标题",
    msg_desc: "文章摘要",
    msg_content: "HTML内容",
    msg_cover: "封面图URL",
    msg_author: "作者",
    msg_type: "post", // post|video|image|voice|text|repost
    msg_has_copyright: true,
    msg_publish_time: Date,
    msg_publish_time_str: "2024/01/15 10:30:00",

    // Link params
    msg_link: "文章链接",
    msg_source_url: "阅读原文链接",
    msg_sn: "sn参数",
    msg_mid: 1234567890,
    msg_idx: 1
  }
}

Error Response

{
  done: false,
  code: 1001,
  msg: "无法获取文章信息"
}

Error Codes

Code Message Description
1000 文章获取失败 General failure
1001 无法获取文章信息 Missing title or publish time
1002 请求失败 HTTP request failed
1003 响应为空 Empty response
1004 访问过于频繁 Rate limited
1005 脚本解析失败 Script parsing error
1006 公众号已迁移 Account migrated
2001 请提供文章内容或链接 Missing input
2002 链接已过期 Link expired
2003 内容涉嫌侵权 Content removed (copyright)
2004 无法获取迁移后的链接 Migration link failed
2005 内容已被发布者删除 Content deleted by author
2006 内容因违规无法查看 Content blocked
2007 内容发送失败 Failed to send
2008 系统出错 System error
2009 不支持的链接 Unsupported URL
2010 内容获取失败 Content fetch failed
2011 涉嫌过度营销 Marketing/spam content
2012 账号已被屏蔽 Account blocked
2013 账号已自主注销 Account deleted
2014 内容被投诉 Content reported
2015 账号处于迁移流程中 Account migrating
2016 冒名侵权 Impersonation

Dependencies

Required npm packages:

  • cheerio - HTML parsing
  • dayjs - Date formatting
  • request-promise - HTTP requests
  • qs - Query string parsing
  • lodash.unescape - HTML entities

Notes

  • Handles various WeChat page structures and anti-scraping measures
  • Automatically detects article type from page content
  • Supports extracting from Sogou WeChat search results (weixin.sogou.com)
  • Some fields may be null depending on article type and page structure
Usage Guidance
This skill's extractor script (scripts/extract.js) appears coherent with the stated purpose and is likely safe to review; however, do NOT run convert.js without inspecting it first. convert.js contains hard-coded absolute paths that read from /Users/canghe/... and write to /Users/canghe/Downloads/..., which is unrelated to normal extraction and could read sensitive local files on your machine. Before installing or running the skill: 1) Inspect or remove convert.js (it's a developer utility, not required for extraction). 2) Run the skill in a sandboxed/isolated environment (container or VM) if you intend to execute the included scripts. 3) If you only need extraction, run scripts/extract.js and review network behavior (it issues HTTP GETs to target sites). 4) Consider locking down network access or rate-limiting to avoid scraping-related blocks. If you want higher assurance, ask the author to explain/clean up convert.js or supply a version of the package without files that access absolute local paths.
Capability Analysis
Type: OpenClaw Skill Name: content-system-wechat-article-extractor-skill Version: 1.0.0 The skill bundle contains a critical security vulnerability in `scripts/extract.js`, which uses `new Function()` to execute JavaScript code extracted directly from remote WeChat article pages to parse metadata. This creates a Remote Code Execution (RCE) risk if the fetched content is malicious. Additionally, `convert.js` includes hardcoded absolute file paths specific to a developer's local environment (`/Users/canghe/`), which is a privacy leak and suggests poor packaging hygiene. While these issues are highly risky, they appear to be functional flaws or leftover development scripts rather than intentional malice.
Capability Tags
requires-oauth-token
Capability Assessment
Purpose & Capability
The skill's name/description align with the code in scripts/extract.js: it fetches mp.weixin.qq.com / sogou pages, parses HTML, and returns structured metadata. However, convert.js (included in the bundle) performs unrelated local filesystem reads and writes to absolute paths in /Users/canghe/..., which is not required for the extractor's described runtime behavior and looks like a leftover developer utility.
Instruction Scope
SKILL.md and the primary extract.js only describe fetching remote pages and parsing HTML. They do not instruct reading arbitrary local files. Despite that, convert.js will read a specific file (/Users/canghe/.claude/.../tool-results/b97eb13.txt) and write to /Users/canghe/Downloads/..., which is outside the stated scope and could expose local data if executed. The presence of this script expands the actionable surface beyond what the SKILL.md describes.
Install Mechanism
There is no install spec (instruction-only skill). All dependencies are standard npm packages listed in package.json/package-lock.json; nothing is downloaded from unusual URLs in the manifest. No archive downloads or remote installers are declared.
Credentials
The skill declares no required environment variables or credentials. extract.js performs HTTP requests to target pages and parses content; no secrets or cloud credentials are requested. (Note: transitive packages in package-lock include many common dependencies — not evidence of credential needs.)
Persistence & Privilege
Flags are default (always:false, user-invocable:true). The skill does not request persistent presence or modify other skills or system-wide settings in the manifest. The main concern is the included convert.js file, not persistent privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install content-system-wechat-article-extractor-skill
  3. After installation, invoke the skill by name or use /content-system-wechat-article-extractor-skill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Publish auxiliary content-system skills
Metadata
Slug content-system-wechat-article-extractor-skill
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is WeChat Article Extractor?

Extract metadata and content from WeChat Official Account articles. Use when user needs to parse WeChat article URLs (mp.weixin.qq.com), extract article info... It is an AI Agent Skill for Claude Code / OpenClaw, with 101 downloads so far.

How do I install WeChat Article Extractor?

Run "/install content-system-wechat-article-extractor-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is WeChat Article Extractor free?

Yes, WeChat Article Extractor is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does WeChat Article Extractor support?

WeChat Article Extractor is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created WeChat Article Extractor?

It is built and maintained by Abigale-cyber (@abigale-cyber); the current version is v1.0.0.

💬 Comments