← 返回 Skills 市场

Content System Wechat Formatter

Name: Content System Wechat Formatter
Author: abigale-cyber

作者 Abigale-cyber · GitHub ↗ · v1.0.1 · MIT-0

cross-platform ⚠ suspicious

129

总下载

当前安装

版本数

在 OpenClaw 中安装

/install content-system-wechat-formatter

功能描述

Render article markdown into WeChat-style HTML as an independent executor. Use when Codex needs公众号排版预览, WeChat HTML output, or a publishable HTML artifact ge...

使用说明 (SKILL.md)

WeChat Formatter

Convert article markdown into WeChat-style HTML for preview, inspection, and downstream publishing. If a sibling *-writing-pack.json exists, this executor will also consume summary points, highlight quotes, share copy, and ending CTA blocks.

Quick Start

Run the default command:

.venv/bin/python -m skill_runtime.cli run-skill wechat-formatter --input content-production/drafts/ai-content-system-article.md

Prepare Source Article

Start from an article markdown draft that is already written and ready for visual formatting. If a sibling *-writing-pack.json exists, it will be used as an optional sidecar.

Follow Formatting Workflow

Read the article markdown draft.
Render the content through the shared formatter runtime in skills/wechat-formatter/runtime.py.
Produce standalone WeChat preview HTML for inspection and downstream publishing.
When a writing-pack sidecar exists, append summary / quotes / share-copy / CTA presentation blocks without altering the source article file.
If wechat-studio is involved, let the workbench apply its own theme, typography, inline image placement, and draft-push workflow on top of this executor.

Write Output

Write the primary exported file to:

content-production/ready/\x3Cslug>-wechat.html

Respect Constraints

This skill formats and renders content; it does not author the article itself
HTML quality depends on the article draft and current workbench state
Workbench theme choices belong to wechat-studio; this skill itself should stay focused on producing HTML from Markdown

Read Related Files

Shared runtime: skills/wechat-formatter/runtime.py
Pipeline entry: skill_runtime/engine.py
Workbench integration: skills/wechat-studio/frontend/server.py
Execution guide: docs/wechat-formatter-execution-spec.md

安全使用建议

This skill's declared purpose (render Markdown to WeChat-style HTML) is reasonable on its face, but runtime.py contains a hardcoded absolute path into a developer's home directory and imports a module from there (wechat_html_renderer). That means: (1) at runtime, code outside the packaged files could be executed if that path exists; (2) the skill will likely fail or behave unpredictably if the external module isn't present; (3) this is a packaging/design issue that could be malicious if the external module were replaced. Before installing or running: ask the author to bundle or vendor the renderer (or change to a relative/importable dependency), or provide an install step that fetches a vetted package; inspect the wechat_html_renderer implementation for network calls or file access; run the skill in a sandboxed environment; and avoid granting access to sensitive systems until the dependency and import behavior are corrected. If you cannot verify the external module, treat this skill as untrusted.

功能分析

Type: OpenClaw Skill Name: content-system-wechat-formatter Version: 1.0.1 The skill bundle contains a hardcoded absolute filesystem path ('/Users/Abigale/.codex/skills/wechat-article-workflow/scripts') in 'runtime.py', which is used to modify the Python system path and import external modules. This is a significant security risk and portability flaw, as it allows the skill to execute code from an arbitrary location outside the bundle's control. While the primary logic appears focused on WeChat HTML formatting, this dependency on a specific user's directory is highly irregular and potentially exploitable if the environment is shared.

能力评估

⚠ Purpose & Capability

The skill's name, README, and SKILL.md all describe a straightforward Markdown→WeChat HTML formatter and declare no external credentials or binaries. However, runtime.py inserts the hardcoded path /Users/Abigale/.codex/skills/wechat-article-workflow/scripts onto sys.path and imports wechat_html_renderer from that location — a dependency unrelated to the stated packaged files and not justified by the description. A properly packaged formatter would either include its renderer or use a relative/packaged import; the absolute user-home path is unexpected and disproportionate.

ℹ Instruction Scope

SKILL.md gives narrow, focused runtime instructions (read markdown, render via the shared runtime, write HTML to content-production/ready). The instructions don't ask for unrelated filesystem or credentials. However, the SKILL.md references 'shared runtime' and other internal pipeline files — combined with the runtime.py import behavior this increases the scope of what actually runs at execution time (it will pull code from an external path).

⚠ Install Mechanism

There is no install spec (instruction-only), which is low risk in general — but runtime.py's reliance on an absolute, external script directory (not included in the file manifest) means code outside the packaged skill would be executed if present. That is effectively a hidden install/runtime dependency and raises risk because arbitrary code from that path would run without being packaged or reviewed.

⚠ Credentials

The skill declares no required env vars or credentials (appropriate). Nevertheless, runtime.py directly references a hardcoded filesystem location in a user home (/Users/Abigale/...). This is equivalent to requesting access to user-local resources and is disproportionate to the stated needs — it may cause execution of code outside the skill bundle or silently fail if the path is absent.

✓ Persistence & Privilege

The skill is not always-enabled, does not request elevated privileges, and there is no indication it modifies other skills or global agent configuration. Autonomous invocation is allowed (platform default) but not combined here with other high-risk privilege requests.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install content-system-wechat-formatter
安装完成后，直接呼叫该 Skill 的名称或使用 /content-system-wechat-formatter 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

Sync latest content-system skill docs and runtime implementation

v1.0.0

WeChat Formatter v1.0.0 – Initial release - Converts article markdown drafts into WeChat-style HTML for preview and publishing. - Optionally appends content blocks (summaries, quotes, CTA) from a sibling writing-pack file. - Produces standalone, publish-ready HTML output without modifying the source markdown. - Designed for integration with WeChat Studio and the wider content production pipeline.

元数据

Slug content-system-wechat-formatter

版本 1.0.1

许可证 MIT-0

累计安装 1

当前安装数 1

历史版本数 2

常见问题