获取公众号热门文章数据，包含多个领域10w+文章，拆解流量密码。技能包含：根据用户输入的关键词，输出标题、作品链接、作者、发布时间、阅读数、推荐理由。

This skill mostly does what it claims (it calls an included Python script to fetch and format WeChat public-article trend data), but there are red flags you should consider before installing or using it: - The script calls a third-party API at onetotenvip.com. If you run the skill, your query keywords (and possibly other context) will be sent to that host. Only use it if you trust that service. - The script disables TLS certificate verification and deliberately avoids sending SNI (server name) when establishing HTTPS connections. This makes network connections opaque and can be used to evade interception detection — a risky implementation choice. Avoid sending sensitive or private keywords/data via this skill. - The SKILL.md lists the 'requests' library dependency, but the script does not use requests; this inconsistency may be benign but is worth asking the author about. Recommendations: - If you must use it, run it in an isolated/sandbox environment or on a machine/network where you can monitor outbound traffic (so you can see what is sent to onetotenvip.com). - Ask the skill author for the API provider's documentation and why TLS verification/SNI were disabled; prefer a version that uses verified TLS (requests or urllib with certificate validation) and a documented, trusted backend. - Do not use the skill for queries containing sensitive, confidential, or personally identifiable information until you can verify the remote service's trustworthiness. - If you have the capability, examine (or ask the author to publish) the remainder of the script to confirm there is no additional behavior (file reads, credential harvesting, unknown callbacks).

Type: OpenClaw Skill Name: gzh-explosive-content-detector Version: 1.0.0 The skill bundle contains a Python script `scripts/fetch_gzh_trends.py` that performs network requests to an external API (`onetotenvip.com`) using raw sockets and explicitly disables SSL certificate verification (`ssl.CERT_NONE`). While these techniques are common in scraping tools to bypass network filters or SNI-based blocking, they introduce significant security vulnerabilities such as Man-in-the-Middle (MITM) risks. The instructions in `SKILL.md` and `references/gzh_explosive_content_workflow.md` are highly directive and control the agent's workflow strictly, but they appear functionally aligned with the stated purpose of WeChat content analysis.