wechat-publisher

用于管理多个微信公众号的内容创作和发布。当用户提到"公众号发布"、"写公众号文章"、"给某个公众号发文"、"切换公众号"、"查看公众号发布情况"、"微信发文"或需要为公众号生成内容、封面图、发布文章时,自动触发此技能。支持多账号管理、内容生成、封面设计、自动发布等完整流程。

This skill is coherent with a WeChat publisher: it uses Playwright to render covers and calls the official WeChat API to upload images and save drafts. Before installing or using it: - Expect to provide WeChat AppID/AppSecret. The package will read them from a .env file or from references/*.json; the registry metadata did NOT list those env vars — verify you supply credentials only in local files or environment variables and do not upload them to public repos. - The code will create and modify local config files (e.g., multi_account_config.json) and write articles, covers, and logs under the specified base_dir. Review paths and ensure sensitive files are gitignored as recommended. - The docs claim the agent will "automatically obtain your current IP" on IP-white-list errors; I did not find a clear implementation for automatic IP lookup in the scripts (you may be asked to run curl/visit ip.cn manually). Test the behavior in a safe environment first. - Playwright and requests must be installed locally; run tests with dummy config/template before using real AppSecret. Keep AppSecret private and rotate it after testing if it was exposed. If you want this skill to be less risky: run it in an isolated environment, provide credentials via environment variables (not committed to disk), inspect the code yourself or run the included tests, and confirm the platform won’t upload your config files. If you need, provide the maintainer with feedback asking them to declare required env vars in registry metadata and to add an explicit IP-discovery function (or clarify the behavior) in code.

Type: OpenClaw Skill Name: yaniw-wechat-publisher Version: 1.1.0 The yaniw-wechat-publisher skill bundle is a well-documented tool for automating WeChat Official Account management. It includes scripts for content generation, HTML-to-PNG cover rendering using Playwright (screenshot_cover.py), and interaction with the official WeChat API (publish_to_wechat.py). Notably, the bundle implements security best practices such as credential management via environment variables and automated sanitization of sensitive data (AppIDs, Secrets, and Tokens) in error logs within credential_manager.py. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found.