wechat-summary2

总结微信公众号文章内容。当用户提供微信公众号文章链接（mp.weixin.qq.com）并要求总结、概括、摘要、快速了解文章内容时使用此 skill。也适用于用户说"帮我看看这篇文章讲什么"、"这篇公众号文章说了啥"、"总结一下这个链接"等请求。只要看到 mp.weixin.qq.com 的链接并且用户想了解内容...

This skill appears to do what it claims: it fetches the provided WeChat article URL (via WebFetch or a bundled Python scraper) and summarizes the extracted text. Before installing, note: (1) the bundled script will be executed locally to fetch the article — review the script if you want to confirm behavior; (2) it makes HTTP requests only to the user-supplied URL (no hidden remote endpoints), but it will not access private/authenticated content that requires a login; (3) scraping may trigger anti-bot pages (the skill detects this and reports it rather than bypassing it); (4) if you are concerned about sending sensitive links to external network, avoid using the skill for private content. Overall the skill is internally consistent and proportionate to its purpose.

Type: OpenClaw Skill Name: wechat-summary2 Version: 1.0.1 The skill is designed to fetch and summarize WeChat articles, using a Python script (scripts/fetch_article.py) as a fallback when standard web fetching fails. While the script logic is benign, the instructions in SKILL.md direct the agent to execute the script via a shell command with a user-provided URL wrapped in double quotes, which is vulnerable to command injection if the URL contains shell metacharacters. No evidence of intentional malice or data exfiltration was found.