公众号文章创作

公众号写作助手 - 专注公众号文章创作，从选题到成稿+自动配图的完整流程。触发词："写公众号"、"公众号文章"、"推文"、"/wechat

Key issues to consider before installing: 1) Hard-coded API key present — scripts/image.env contains an API_KEY value. Treat this as a secret leak: do not assume it belongs to you. Replace it with your own key or remove the file. Consider revoking the key if it appears to be yours or exposing sensitive credentials. 2) Undeclared credential usage — the skill metadata declares no required env vars, but the image script expects a credentials file (scripts/image.env). The mismatch is suspicious and means the skill will use whatever key is present in the repository by default. 3) Fixed absolute save path — SKILL.md forces saving articles/prompts to E:\Claude Code\claude\articles\青少年学习教练公众号\. Change this to a configurable relative path or prompt the user for a directory before saving; running as-is may fail on non-Windows systems or overwrite files. 4) Network activity — the included Python script calls an external image-generation API (智谱AI / open.bigmodel.cn) and downloads images. If you keep/replace the provided API key, those external calls will be made under that credential. Run the script in a sandbox or review network behavior first. Recommended actions: - Do not use the embedded API key. Replace scripts/image.env with your own key or remove it and require the user to provide credentials. - Modify the skill to make the article output directory configurable (or prompt the user) instead of a hard-coded absolute path. - Run the image generation script manually in a controlled environment after reviewing/confirming the API key and dependency installation (pip install zhipuai). - If you want to proceed, test in a sandbox/VM and inspect all files the skill writes. If you cannot confirm the origin/ownership of the embedded API key, do not use it.

Type: OpenClaw Skill Name: wechat-article-writer Version: 1.0.0 The skill is classified as suspicious due to several significant security vulnerabilities. Most critically, the `stages/04-writing.md` file explicitly instructs the AI agent to execute a shell command (`python scripts/generate_images.py --input prompts.jsonl`). This presents a high risk of prompt injection leading to arbitrary code execution (RCE) if the `--input` file or the command line arguments can be manipulated by a malicious user prompt. Additionally, a sensitive API key is hardcoded in `scripts/image.env` and exposed in `SKILL.md`, which is a severe credential management flaw. Hardcoded Windows-style file paths for saving content (`E:\Claude Code\claude\articles\青少年学习教练公众号\`) are also present in `SKILL.md` and `stages/04-writing.md`, posing compatibility and potential file system interaction issues.