← 返回 Skills 市场
wechat-article-explainer
作者
chenhao11235813
· GitHub ↗
· v1.0.1
· MIT-0
358
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install wechat-article-explainer
功能描述
微信公众号文章通俗内容解释技能。当用户需要总结或解释微信公众号链接或url时使用这个技能。技能包含：根据用户提供的链接或URL，读取链接内容，用通俗的语言解释内容。
安全使用建议
This skill appears to do exactly what it claims, but take a few precautions before using it in production: 1) Inspect scripts/wechat_reader.py yourself (it's included) and confirm you are comfortable running it. 2) Install dependencies from official sources (pip and the official Playwright install) and be aware Playwright will download a browser binary. 3) Prefer running the script in a sandboxed environment (or without browser mode: --no-browser) if you are worried about untrusted page JavaScript or network access. 4) Only provide trusted mp.weixin.qq.com links; because the script will attempt any URL it's given, it could be used to probe internal services (SSRF) if the agent has network access to non-public hosts. 5) If provenance is important, ask the publisher for source/origin details — the registry metadata shows an owner id but no homepage.
功能分析
Type: OpenClaw Skill
Name: wechat-article-explainer
Version: 1.0.1
The skill is designed to scrape and summarize WeChat articles using a Python script (scripts/wechat_reader.py) and Playwright. While the Python code itself is functional and lacks malicious logic, the instructions in SKILL.md introduce a shell injection vulnerability by directing the AI agent to execute a command-line tool using user-provided input without explicit sanitization (python3 scripts/wechat_reader.py "<文章链接>"). This pattern allows for potential command execution if a user provides a URL containing shell metacharacters.
能力评估
Purpose & Capability
The name/description, SKILL.md, requirements.txt, and scripts/wechat_reader.py are consistent: the skill fetches WeChat article pages and extracts title, author, date, and content. Required dependencies (requests and optionally playwright) align with the stated approach (direct HTTP or browser emulation). No unrelated environment variables or credentials are requested.
Instruction Scope
SKILL.md explicitly instructs running scripts/wechat_reader.py on mp.weixin.qq.com article URLs, which the code supports. However, the script does not strictly enforce the domain — if given an arbitrary URL it will attempt to fetch it. That means an attacker or a careless user could cause the agent to request arbitrary network endpoints (SSRF/probing). Also, using Playwright runs a full browser and executes page JavaScript from remote pages (normal for scraping, but increases the attack surface). SKILL.md does warn about anti-leeching and suggests using browser mode or asking the user to copy content when fetch fails.
Install Mechanism
There is no automated install spec; dependencies are listed in requirements.txt. Installing Playwright requires an additional browser install step (playwright install chromium). All installs are from standard Python packages (pip). No downloads from obscure URLs or arbitrary extract operations are present in the package.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The level of access requested (networking to fetch public web pages) is proportional to the stated purpose.
Persistence & Privilege
always is false and the skill does not request persistent platform privileges. It contains a runnable script but does not attempt to modify other skills or global agent settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install wechat-article-explainer - 安装完成后，直接呼叫该 Skill 的名称或使用
/wechat-article-explainer触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
- Updated skill metadata format for clarity and standardization.
- Moved wechat_reader.py into the scripts/ directory.
- Added .clawhub/origin.json and _meta.json files for better configuration and management.
- Removed the old wechat_reader.py from the root directory.
- Adjusted usage instructions to reflect new script location.
v1.0.0
- Initial release of the 微信公众号文章总结 skill.
- Automatically summarizes the content of WeChat articles in plain language.
- Validates article links and uses a Python tool to extract content.
- Supports both HTTP and browser (Playwright) extraction modes.
- Provides clear installation and usage instructions.
- Handles extraction failures with user-friendly prompts.
元数据
常见问题
wechat-article-explainer 是什么？
微信公众号文章通俗内容解释技能。当用户需要总结或解释微信公众号链接或url时使用这个技能。技能包含：根据用户提供的链接或URL，读取链接内容，用通俗的语言解释内容。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 358 次。
如何安装 wechat-article-explainer？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install wechat-article-explainer」即可一键安装，无需额外配置。
wechat-article-explainer 是免费的吗？
是的，wechat-article-explainer 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
wechat-article-explainer 支持哪些平台？
wechat-article-explainer 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 wechat-article-explainer？
由 chenhao11235813（@chenhao11235813）开发并维护，当前版本 v1.0.1。
推荐 Skills