← 返回 Skills 市场
onegrown

Wechat Allauto Gzh

作者 onegrown · GitHub ↗ · v3.0.0 · MIT-0
cross-platform ⚠ suspicious
115
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install tsmf-wechat-oa
功能描述
微信公众号全自动写作系统。支持 20 种精美主题,自动生成封面,一键推送草稿箱。 适用场景: - 用户需要生成公众号文章草稿 - 用户想要切换多种排版主题 - 用户需要自动化内容生产流程 - 用户想要批量生成主题演示文章 <example>用户: "帮我写一篇关于人工智能的公众号文章"</example> <ex...
安全使用建议
What to check before installing or enabling this skill: - Clarify credentials: the registry declares no required env vars but SKILL.md requires WECHAT_APP_ID and WECHAT_APP_SECRET (and optionally TAVILY_API_KEY). Do not provide production WeChat AppSecret — use a disposable/test account with minimal privileges. - Inspect network-capable scripts: review scripts/push_draft.py, scripts/update_draft.py, upload_to_github.py and any file that performs HTTP requests for unexpected endpoints or hardcoded tokens. Look for any POSTs not aimed at official WeChat endpoints. - Review local/system probing: cron_detector.py and the SKILL instructions instruct checking crontab, systemd timers, and environment variables. Decide whether you are comfortable with the skill reading system scheduling and config; run in a sandbox first. - Examine cleanup and upload helpers: cleanup.py deletes local draft/cache paths; upload_to_github.py can push to remote repos — ensure these are safe and you understand where they point. - Run in a restricted environment first: run the repository in an isolated container or VM, inspect network traffic, and only then give credentials. If possible, rotate/revoke test credentials after use. - Prefer manual approval: since the skill can autonomously perform push operations and file I/O, avoid enabling autonomous runs until you confirm the code and configuration. If you want, I can list the exact places in the code where network calls, crontab/systemd checks, or credential reads occur (e.g., lines in push_draft.py, cron_detector.py) so you can review them in detail.
功能分析
Type: OpenClaw Skill Name: tsmf-wechat-oa Version: 3.0.0 The tsmf-wechat-oa skill bundle is a legitimate and well-documented tool for automating the creation, formatting, and publishing of WeChat Official Account articles. It features a comprehensive workflow including topic analysis, AI-assisted writing, theme-based HTML rendering, and integration with the official WeChat Drafts API. While the bundle includes scripts that perform system inspection (e.g., cron_detector.py checking for scheduled tasks via subprocess) and repository management (upload_to_github.py), these behaviors are transparently documented and directly support the tool's 'auto-mode' and development features. All network requests are directed to legitimate endpoints (api.weixin.qq.com, Tavily), and sensitive credentials are handled via environment variables without evidence of exfiltration.
能力评估
Purpose & Capability
The skill claims a WeChat auto-writing/publishing purpose and includes push_draft.py and related code — that fits. However the registry metadata declares no required env vars or credentials while SKILL.md and multiple scripts explicitly require WECHAT_APP_ID and WECHAT_APP_SECRET (and optional TAVILY_API_KEY). That mismatch (no declared creds but runtime docs require them) is incoherent and should be corrected/clarified.
Instruction Scope
SKILL.md tells the agent to ask users and then run a full pipeline including reading environment variables, detecting scheduled tasks (cron/systemd), writing files, generating covers, performing web searches (Tavily) and pushing drafts to WeChat APIs. The cron_detector logic (inspecting crontab, systemd timers, config files) and instructions referencing local file paths/scripts mean the skill will inspect system state beyond just calling WeChat APIs — this expands scope and privacy impact.
Install Mechanism
There is no install spec (no packaged install), so code is included as Python scripts and a requirements.txt. That reduces supply-chain risk from remote downloads but means the agent or operator may run local Python scripts directly. No external binary downloads were declared, but included scripts like upload_to_github.py and cleanup.py can modify files and call network APIs — inspect those before running.
Credentials
Although the registry lists no required env vars, SKILL.md documents required WECHAT_APP_ID and WECHAT_APP_SECRET (and optional TAVILY_API_KEY and WECHAT_AUTO_MODE). Requesting WeChat credentials is expected for pushing drafts, but the absent declaration is a red flag. The skill also checks environment (WECHAT_AUTO_MODE) and system scheduling — reading these is plausible for 'auto' mode but expands access to sensitive system/state data. Ensure only minimal, test credentials are provided.
Persistence & Privilege
always:false (no forced persistence). The skill contains scripts that write to output/, cleanup or delete draft files, detect cron/systemd, and an upload_to_github.py. None of these require an always:true flag, but they do give the skill filesystem and network effects when executed. That is expected for a publish-orchestrator but increases blast radius if misused.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install tsmf-wechat-oa
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /tsmf-wechat-oa 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v3.0.0
Major update: Version 3.0.0 completely restructures the skill as an OpenClaw指向型 Skill with expanded features and new workflows. - Rebuilt the skill into an instructional guide for OpenClaw, focusing on autonomous and interactive WeChat official account article generation. - Expanded to support 20+ beautifully designed themes across two series (classic & macaron), with theme recommendations and detailed style selection. - Introduced a fully guided user interaction process covering topic, audience, type, style, and publishing method selection. - Added support for automated outline generation, writing, layout conversion, cover creation, draft pushing, and content validation (Tavily integration). - Designed for high configurability: customizable themes, publishing automation, and clear error handling/output structure.
元数据
Slug tsmf-wechat-oa
版本 3.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Wechat Allauto Gzh 是什么?

微信公众号全自动写作系统。支持 20 种精美主题,自动生成封面,一键推送草稿箱。 适用场景: - 用户需要生成公众号文章草稿 - 用户想要切换多种排版主题 - 用户需要自动化内容生产流程 - 用户想要批量生成主题演示文章 <example>用户: "帮我写一篇关于人工智能的公众号文章"</example> <ex... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 115 次。

如何安装 Wechat Allauto Gzh?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install tsmf-wechat-oa」即可一键安装,无需额外配置。

Wechat Allauto Gzh 是免费的吗?

是的,Wechat Allauto Gzh 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Wechat Allauto Gzh 支持哪些平台?

Wechat Allauto Gzh 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Wechat Allauto Gzh?

由 onegrown(@onegrown)开发并维护,当前版本 v3.0.0。

💬 留言讨论