← Back to Skills Marketplace
79
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install wechat-saver
Description
微信公众号文章抓取工具。将微信文章转换为 Obsidian 兼容的 Markdown 格式,支持图片下载、智能格式识别(代码块/列表/引用)。
Usage Guidance
This skill appears to implement a legit WeChat-to-Markdown scraper, but before installing or running it: (1) Review and run it in an isolated environment (use an isolated virtualenv or container); avoid pip --break-system-packages unless you know what it does. (2) Only provide trusted URLs — the script will perform HTTP requests to whatever URL you pass, including linked images, so a malicious or internal URL could cause unwanted network requests (SSRF/internal scanning). If you only want WeChat content, consider adding a simple domain check (only allow mp.weixin.qq.com) before fetching. (3) Inspect the script yourself for any modifications if you plan to enable cookie/login features in the future (those would require storing credentials/cookies and increase risk). (4) Verify output paths before running to avoid accidental file overwrites. If you want, I can produce a hardened wrapper that enforces domain restrictions and safer network timeouts to reduce the risk.
Capability Analysis
Type: OpenClaw Skill
Name: wechat-saver
Version: 1.1.0
The wechat-saver skill is a legitimate utility designed to scrape WeChat articles and convert them into Obsidian-compatible Markdown files. The Python script (wechat_to_md.py) uses standard libraries like requests and BeautifulSoup for content extraction and image downloading, with no evidence of data exfiltration, unauthorized execution, or malicious prompt injection. The 'smart format recognition' feature is purely for Markdown formatting and does not execute the identified commands.
Capability Assessment
Purpose & Capability
Name/description match the included Python script: it fetches article HTML, extracts content, downloads images and writes Obsidian-compatible Markdown. There are no unrelated required env vars or binaries. Minor mismatch: presence of package.json (npm-style metadata) in a Python-based skill is odd but not harmful.
Instruction Scope
SKILL.md and the script instruct the agent/user to fetch URLs and download all images referenced by the page. The script does not enforce domain checks (it will attempt to GET any URL you pass), so if a user provides a specially crafted link it can cause the runner to make arbitrary network requests (including to internal IPs), which is a server-side request forgery / internal scanning risk. The instructions also recommend batch processing arbitrary URLs — amplifying that network exposure. Otherwise the instructions stick to expected scraping and file-write operations.
Install Mechanism
This is instruction-only (no automated install). Dependencies are normal Python libraries and the SKILL.md shows creating a venv. However the docs include pip install examples that use --break-system-packages (a flag that can alter global Python packages) and recommend installing from a third-party mirror; users should avoid --break-system-packages unless they understand the consequences and prefer using an isolated virtualenv.
Credentials
The skill requires no environment variables, tokens, or credentials. The SKILL.md explicitly states it does not support login/paid articles currently (a planned future feature would require cookies/credentials). No secret exfiltration appears in the code that was reviewed.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It writes files to the user's filesystem (defaulting to ~/Documents/Obsidian Vault/00-Inbox or a user-specified path), which is expected behavior for this utility.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install wechat-saver - After installation, invoke the skill by name or use
/wechat-saver - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
Initial release
Metadata
Frequently Asked Questions
What is Wechat Saver?
微信公众号文章抓取工具。将微信文章转换为 Obsidian 兼容的 Markdown 格式,支持图片下载、智能格式识别(代码块/列表/引用)。 It is an AI Agent Skill for Claude Code / OpenClaw, with 79 downloads so far.
How do I install Wechat Saver?
Run "/install wechat-saver" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Wechat Saver free?
Yes, Wechat Saver is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Wechat Saver support?
Wechat Saver is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Wechat Saver?
It is built and maintained by Kuiil (@kuiilabs); the current version is v1.1.0.
More Skills