Wechat Publisher Skill Clean

Automatically collects 15 AI news items and publishes them as HTML drafts to WeChat Official Account with customizable templates and scheduling.

This skill appears to implement WeChat publishing code and will need your WeChat AppID and AppSecret (and network access). Before installing: (1) don't rely on the registry metadata alone — verify the skill actually requires and documents app_id/app_secret (it does in SKILL.md and code); (2) confirm you trust the author/where the package came from, because supplying AppSecret gives the skill ability to call your WeChat API; (3) note the package metadata is inconsistent with SKILL.md (missing declared env vars and missing install/activate scripts) — ask the publisher for clarification or a verified source; (4) store the AppSecret securely (use environment variables rather than plain config files, set restrictive file permissions) and review the token-cache/license files the skill writes; (5) if you have any doubt, test in an isolated environment (VM or container) and inspect runtime network requests (to ensure there are no unexpected endpoints) before using it with a production account.

Type: OpenClaw Skill Name: wechat-publisher-skill-clean Version: 1.0.0 The skill is a legitimate automation tool for collecting AI news and publishing it to WeChat Official Account draft boxes. It uses standard Python libraries (requests) to interact with official WeChat API endpoints (api.weixin.qq.com) and handles sensitive credentials like AppSecret through local configuration or environment variables. The monetization logic, including a 50-use trial and a local license check, is transparently documented in SKILL.md and implemented in publish.py without any evidence of data exfiltration, unauthorized remote execution, or malicious prompt injection.