微信公众号自动发布增强版

一键发布 Markdown/HTML 文章到微信公众号草稿箱，支持自动配图、美化排版、UTF-8 编码

This skill appears to implement exactly what it claims — a WeChat article publisher — and the included Python file shows network calls only to the official WeChat API (api.weixin.qq.com). However, the package metadata did not declare the required WECHAT_APPID/WECHAT_APPSECRET even though SKILL.md and the script ask for them. Before installing or providing credentials: - Inspect the included wechat_publish.py (already provided) to confirm there are no unexpected remote endpoints or obfuscated code (the file calls only api.weixin.qq.com). - Only provide your APPID/APPSECRET to skills you trust; consider using a limited or test WeChat account first. - Use the script's --dry-run (or run locally) and avoid putting credentials into untrusted shared environments. - Confirm network calls go to api.weixin.qq.com (monitor outgoing connections if possible). I rated this 'suspicious' because of the metadata omission regarding required credentials; that omission could be an innocent packaging error but is worth double-checking. If you find other required env vars, remote installers, or non-WeChat endpoints in the code, that would raise the severity.

Type: OpenClaw Skill Name: wechat-publisher-pro Version: 3.1.3 The skill bundle provides a legitimate utility for publishing Markdown or HTML articles to WeChat Official Account draft boxes. The core logic in `wechat_publish.py` uses the official WeChat API (api.weixin.qq.com) for authentication, image uploading, and draft creation, with no evidence of data exfiltration or unauthorized network calls. The accompanying documentation (ACCURACY_POLICY.md and CHECKLIST.md) is exceptionally detailed regarding content quality and technical accuracy for a robotics community, further supporting the tool's intended professional use case.