← Back to Skills Marketplace
411
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install wxmp-reader
Description
Read and summarize WeChat Official Account articles (微信公众号文章) by URL. Bypasses WeChat's anti-bot detection to extract full article text, title, author, date,...
Usage Guidance
This skill appears to do what it claims (fetch and screenshot WeChat articles by evading anti-bot checks). Main concerns: (1) the SKILL.md mandates always sending a screenshot — that can leak images of pages that may include private or sensitive information, even if the user didn't ask for an image; (2) the code performs filesystem searches to locate node modules (normal for dependency resolution, but it reads local paths); and (3) the skill author and homepage are unknown. Before installing: review the two included scripts yourself, consider running the skill in an isolated environment, and/or modify the SKILL.md to make screenshotting opt-in (or require explicit user consent before sending images). If you will run this in a production/chat environment, prefer a manual confirmation step before sending screenshots and ensure the host has only the minimum necessary access.
Capability Analysis
Type: OpenClaw Skill
Name: wxmp-reader
Version: 1.0.0
The skill contains a potential shell injection vulnerability in 'fetch_wechat.js' and 'screenshot_wechat.js' because they use 'execSync' to execute a 'find' command using unquoted environment variables (NVM_DIR and HOME) to locate dependencies. While the scripts' primary logic for bypassing WeChat's anti-bot detection is well-documented and aligned with the stated purpose, the use of shell execution for dependency discovery is a risky implementation flaw. Additionally, the 'SKILL.md' instructions contain rigid directives that force the agent to always capture and send screenshots even if the user only requests a text summary.
Capability Assessment
Purpose & Capability
Name/description align with included scripts: both fetch text and capture screenshots from mp.weixin.qq.com using playwright-core and a local Chrome binary. The included code intentionally hides automation fingerprints to bypass WeChat bot checks — this is coherent with the stated goal.
Instruction Scope
SKILL.md instructs the agent to always run fetch and to 'Never skip the screenshot' and to send the screenshot via message(action=send). That forces transmission of rendered page images (which may contain PII or sensitive content) even when the user didn't request an image. The SKILL.md also contains a contradictory statement earlier (recommended workflow says screenshot is optional), creating ambiguity about when images are required. Scripts also run filesystem searches (execSync with find) to locate playwright-core, which reads local paths and may reveal system layout — this is explainable for dependency discovery but worth noting.
Install Mechanism
No remote install/downloads or extract steps; this is an instruction-only skill with two included Node scripts. Dependencies are local Chrome/Chromium and playwright-core, which the SKILL.md instructs the operator to install manually. No external archives/URLs are fetched by the skill itself.
Credentials
The skill requests no environment variables, no credentials, and no config paths. Its use of local binaries (Chrome) and node modules (playwright-core) is proportionate to the task. The scripts do reference HOME and NVM_DIR when searching for modules, which is reasonable for locating node modules but does touch local environment values.
Persistence & Privilege
The skill is not always-enabled, does not request elevated persistence, and does not alter other skills or system-wide settings. It runs only when invoked.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install wxmp-reader - After installation, invoke the skill by name or use
/wxmp-reader - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- feat: wechat articles reader skill
Metadata
Frequently Asked Questions
What is WeChat Articles Reader?
Read and summarize WeChat Official Account articles (微信公众号文章) by URL. Bypasses WeChat's anti-bot detection to extract full article text, title, author, date,... It is an AI Agent Skill for Claude Code / OpenClaw, with 411 downloads so far.
How do I install WeChat Articles Reader?
Run "/install wxmp-reader" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is WeChat Articles Reader free?
Yes, WeChat Articles Reader is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does WeChat Articles Reader support?
WeChat Articles Reader is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created WeChat Articles Reader?
It is built and maintained by Reed Chan (@reedchan7); the current version is v1.0.0.
More Skills