weixin-xlog-analyzer

解析和分析微信Xlog日志文件，提取关键信息并生成诊断报告；当用户需要分析微信日志、排查故障或统计日志数据时使用

This skill appears internally consistent and only processes local log files. Before using it: (1) review the two Python scripts yourself or run them in a sandbox to confirm behavior; (2) ensure any Xlog files are legitimately obtained and decrypted with your chosen tool (the skill does not perform decryption); (3) avoid running on systems containing highly sensitive PII unless you have policies to redact logs, since parsed output may include user data; (4) for very large logs, run on a machine with sufficient memory or process the logs in batches as the documentation suggests; (5) if you need networked/automated analysis, confirm you are comfortable extending the scripts — as provided they do not exfiltrate data or make network calls.

Type: OpenClaw Skill Name: weixin-xlog-analyzer Version: 1.0.0 The skill bundle's `SKILL.md` instructions and `references/analysis_guide.md` examples direct the AI agent to execute Python scripts (`scripts/xlog_parser.py`, `scripts/log_analyzer.py`) via shell commands, passing file paths as arguments. This creates a shell injection vulnerability if the AI agent does not properly sanitize or quote user-provided input before constructing and executing these commands. While the Python scripts themselves are benign and perform their stated log analysis functions, they do not implement input sanitization for their command-line arguments, thus relying on the calling agent to prevent injection.