wechat-article-getter

Extract full text from WeChat Official Account (微信公众号) article URLs. Use when a user shares an mp.weixin.qq.com link and asks to read, summarize, analyze, or...

This skill appears to implement a legitimate WeChat-article extractor, but there are implementation issues and runtime implications you should consider before installing: - The setup/install will download Python packages and a Chromium browser (~100–200MB) from the network and write them to your user cache/home. Expect a sizable download and disk usage. - The scripts call pip at runtime (subprocess.check_call). That is normal for bootstrapping Playwright but means code will execute package installation commands — run this in a controlled environment (container or VM) if you are cautious. - The documented mirror fallback is misleading: the mirror search code uses httpx but the setup script does not install httpx, and the fallback path in the main function does not provide the required title_hint, so automatic mirror fallback will generally fail. If you depend on that feature, review/patch the code (add httpx to installs and pass a title hint). - The tool only performs HTTP(S) requests to the target article and configured mirror sites; it does not request credentials or exfiltrate arbitrary files. Still, test with non-sensitive URLs first. Recommendations: Inspect the scripts locally, run setup and fetch inside an isolated environment (Docker/container) if possible, and confirm the network/download behavior is acceptable. If you need the mirror fallback, modify setup.py to install httpx and fix the call that invokes _fetch_via_mirror so it supplies a title hint extracted from the page or metadata.

Type: OpenClaw Skill Name: wechat-article-getter Version: 1.0.0 The skill extracts WeChat articles using Playwright and includes automated setup routines in scripts/setup.py and scripts/fetch_article.py that execute shell commands via subprocess to install Python packages and Chromium binaries. While these actions are aligned with the stated purpose of the skill, the use of shell execution for environment modification and the operation of a headless browser with the --no-sandbox flag represent high-risk capabilities. No evidence of malicious intent, data exfiltration, or prompt injection was found.