← 返回 Skills 市场
sipingme

Web Publisher Skill

作者 PING SI · GitHub ↗ · v0.6.1 · MIT-0
cross-platform ✓ 安全检测通过
239
总下载
0
收藏
2
当前安装
22
版本数
在 OpenClaw 中安装
/install web-publisher
功能描述
输入文章 URL,自动提取正文、可选 AI 改写、并发布到微信公众号。支持微信、知乎、36kr、CSDN、头条、小红书等平台提取,全部由服务端完成;CLI 不安装任何 npm 依赖。注册、登录、公众号配置全部通过对话 + 一次性浏览器跳转完成。可配合 browser-web-search 先搜索拿到 URL 再批...
安全使用建议
This skill is internally consistent: it stores and uses an API key and calls a remote service (tools.siping.me / a pipeline API) to fetch, rewrite, and publish articles. Before installing, confirm you trust the remote service because any URL you submit and the API key allow that service to fetch content and create drafts or publish on your behalf. Test with draft mode and a non-production account first. Verify the credential file location (~/.web-publisher/credentials.json) and prefer using environment variables in CI if you need temporary credentials. Review the included scripts if you need higher assurance (they are small, self-contained Node.js files and require Node >=18). Finally, rely on the skill's safeguards (default draft, do not expose AppSecret) but remember those assurances depend on the remote service's behavior, which is outside the local code bundle.
功能分析
Type: OpenClaw Skill Name: web-publisher Version: 0.6.1 The web-publisher skill bundle is a well-designed tool for extracting and publishing web content to WeChat. It demonstrates strong security awareness by implementing a device code flow for authentication and using external web forms for sensitive configurations (like WeChat AppSecrets), which prevents credentials from entering the AI's conversation context or local logs. The CLI manages credentials locally in `~/.web-publisher/credentials.json` using restricted file permissions (0600) and communicates exclusively with the documented service endpoint (tools.siping.me). No evidence of malicious intent, data exfiltration, or unauthorized execution was found.
能力标签
requires-sensitive-credentials
能力评估
Purpose & Capability
The skill claims to send URLs and publish via a remote pipeline service; the code requests only pipeline-related config (WEB_PUBLISHER_API_URL / USER_ID / API_KEY optionally) and talks to tools.siping.me and the pipeline API. No unrelated credentials, binaries, or system paths are required.
Instruction Scope
SKILL.md instructs the agent to run the included CLI commands (scripts/run.js) and to hand one-time browser short-links to users. The runtime behavior described (local credential file, HTTP calls to tools/pipeline endpoints, polling job status) matches the code. The instructions explicitly constrain sensitive handling (do not expose AppSecret in conversation, default to draft), and there are no instructions to read unrelated files or exfiltrate extra data.
Install Mechanism
There is no external install or download; the package ships JS CLI files that the agent will execute. This is lower risk than fetching remote installers, but it does mean code in scripts/*.js will run locally when invoked. The code does not pull external packages or execute arbitrary installers.
Credentials
Optional environment variables are limited to the documented pipeline tooling (WEB_PUBLISHER_TOOLS_URL, WEB_PUBLISHER_API_URL, WEB_PUBLISHER_USER_ID, WEB_PUBLISHER_API_KEY). The credential file is stored under ~/.web-publisher and the code enforces mode 0600; required secrets are proportional to a service that must act on the user's behalf.
Persistence & Privilege
The skill does not request always: true, does not modify other skills, and only persists credentials to its own directory (~/.web-publisher/credentials.json). Network permissions are scoped to the service domains documented in the manifest. The CLI also supports revocation (logout).
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install web-publisher
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /web-publisher 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.6.1
- 新增 scripts/lib/manifest.js 文件,为 skill 引入新的依赖或功能模块 - 其他功能、使用说明与文档内容保持不变
v0.6.0
Version 0.6.0 - 增加专业版页眉页脚(wrapper)配置与管理功能,包括 `wrapper config`、`wrapper status`、`wrapper on`、`wrapper off` 等指令说明和用法。 - 命令参考、用户意图与说明同步更新,详细覆盖 wrapper 相关的交互和错误提示。 - 说明文档补充了页眉页脚内容不参与 AI 改写的介绍,并列明 wrapper 自动拼接逻辑。 - 支持主题中文名与主题 ID 自动映射,主题表中补充详细风格描述。 - 新增核心代码文件:scripts/lib/credentials.js 和 scripts/lib/http.js。
v0.5.0
**Major update: All article extraction, rewriting, and publishing now handled fully on the server—no local npm dependencies, onboarding simplified.** - Removes all CLI/npm installation requirements; all processing now pure HTTP to the server. - Supports browser-based onboarding: account registration, login, and public account configuration via a one-time browser link. - Sensitive keys (AppSecret/API Key) never enter dialogue context; all credential exchange and management handled securely. - Command set and error handling standardized for account, config, and publishing flows; new `login`, `wechat config`, `whoami`, and `logout` commands. - Article extraction supports more platforms and is entirely server-side; CLI now just manages credentials and requests. - Updated documentation with new workflow and improved security guarantees.
v0.3.5
- 支持与 browser-web-search skill 配合,实现“搜索并批量发布”流水线,提升内容自动化能力。 - 文档新增多个平台(头条、微信、知乎、36kr、CSDN、小红书等)与批量发布的详细用法说明。 - 增补主题选项说明,列出多种微信发布主题。 - 安装依赖要求明确升级到 news-to-markdown@^3.2.0,涵盖相关兼容性提醒。 - 说明结构优化,更清晰区分“内容来源”与“发布目标”。
v0.3.4
版本同步
v0.3.2
- Reverted SKILL.md content to an earlier version with simplified safety and trust explanations. - Updated version and metadata in SKILL.md from 0.3.2 to 0.2.7. - Minor adjustments to documentation details and formatting. - config.json and scripts/run.js may also have minor updates corresponding to the version rollback.
v0.3.12
版本同步
v0.3.1
test
v0.3.0
版本同步
v0.2.9
- No file changes detected in this release. - Documentation and feature descriptions remain unchanged from the previous version.
v1.0.0
Web Publisher 1.0.0 is a major update with significant changes to structure, usage, and configuration: - Streamlined documentation: unified to focus on web article extraction and publishing, with simple usage instructions. - Switched to command-based interface (`scripts/run.js`) for drafting or publishing from URL, with clear usage examples. - Changed required environment variables: now needs `WEB_PUBLISHER_API_URL`, `WEB_PUBLISHER_USER_ID`, `WEB_PUBLISHER_API_KEY`. - Removed older internal references and scripts for a cleaner setup (no more per-file guides for IP白名单、主题说明等). - Added new, concise platform and workflow overview for broader platform support.
v0.2.8
## web-publisher v0.2.8 Changelog - Updated: Modified config.json (details not specified). - No functional, behavior, or documentation changes detected in SKILL.md. - All other files unchanged.
v0.2.7
- 版本号更新为 0.2.7,保持与主版本规范一致。 - 无功能或接口变更,现有实现和用法保持不变。 - SKILL.md 与配置文件结构及指引保持一致,只修正了版本字段。 - 文档描述更准确地对应当前 skill 版本。
v0.2.6
- Renamed the skill from "wechat-md-publisher" to "web-publisher". - Updated all documentation references and display names to use "web-publisher" instead of the previous name. - No functional or behavioral changes introduced; skill capabilities and usage remain the same.
v0.2.5
- Major upgrade: Now fully based on the open-source `wechat-md-publisher` npm package, enabling direct Markdown publishing to WeChat Official Accounts with flexible theme, image, and credential management. - Expanded documentation with quick start, IP 白名单 (whitelist), and theme references for step-by-step guidance. - Environment variable and CLI credential configuration supported; credentials stored with AES-256 encryption (never hard-coded). - Added postinstall script for streamlined setup. - Enhanced README and help docs for best practices and security notes. - Platform focus updated: This skill now targets direct WeChat Markdown publishing—use with `news-to-markdown-skill` for full content extraction and re-publishing pipeline.
v0.2.3
同步最新代码
v0.2.2
bump version to 0.2.2
v0.0.1
**重大变更:Skill 全面升级为 wechat-md-publisher,专注于微信公众号 Markdown 文章发布,配置与安全细节显著增强。** - Skill 重命名为 wechat-md-publisher,功能定位明确,专注 Markdown 文章草稿/发布/主题/图片处理。 - 安装方式调整为 npx 动态拉取官方 npm 包,详细标明供应链和凭证加密风险,新增合规/审计/安全说明。 - 用法文档大幅扩展,增加账号配置、IP 白名单详细流程、本地图片处理与一键转载 SOP。 - 参数与环境变量配置增强,支持 theme、wrapper、草稿/发布分离等高级管理功能。 - 权限声明细化,包括网络、文件系统与凭证加密存储流程,合规信息全面披露。 - 新增多份使用参考(IP 白名单配置、快速入门、主题管理),文档体系更完善。
v0.2.1
bump version to 0.2.1
v0.2.0
v0.2.0: 简化帮助文本和进度提示
元数据
Slug web-publisher
版本 0.6.1
许可证 MIT-0
累计安装 2
当前安装数 2
历史版本数 22
常见问题

Web Publisher Skill 是什么?

输入文章 URL,自动提取正文、可选 AI 改写、并发布到微信公众号。支持微信、知乎、36kr、CSDN、头条、小红书等平台提取,全部由服务端完成;CLI 不安装任何 npm 依赖。注册、登录、公众号配置全部通过对话 + 一次性浏览器跳转完成。可配合 browser-web-search 先搜索拿到 URL 再批... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 239 次。

如何安装 Web Publisher Skill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install web-publisher」即可一键安装,无需额外配置。

Web Publisher Skill 是免费的吗?

是的,Web Publisher Skill 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Web Publisher Skill 支持哪些平台?

Web Publisher Skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Web Publisher Skill?

由 PING SI(@sipingme)开发并维护,当前版本 v0.6.1。

💬 留言讨论