← 返回 Skills 市场
17807
总下载
33
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install wechat-article-search
功能描述
搜索微信公众号文章技能。通过微信搜索获取文章列表，覆盖科技/AI、社会热点、财经、教育、职场等各类中文资讯；可按关键词检索并返回标题、概要、发布时间、来源公众号与链接。当用户需要查找微信公众号文章、整理参考资料或快速获取文章信息时使用此技能。
安全使用建议
Review this skill before installing. Prefer a project-local, pinned dependency install instead of global npm installation, use it only for explicit WeChat article searches, avoid the real-URL resolution option unless needed, and be aware that it relies on scraping-style requests that may violate site rules or expose your environment to attacker-influenced outbound requests.
功能分析
Type: OpenClaw Skill
Name: wechat-article-search
Version: 0.1.0
The skill bundle is classified as suspicious due to a file write vulnerability in `scripts/search_wechat.js`. The script allows writing search results to an arbitrary file path specified by the user via the `-o` or `--output` command-line argument. This lack of input sanitization for the output path could lead to path traversal, allowing an attacker to write data to unintended locations on the file system. While the content written is the script's own output (JSON search results), the ability to control the write location is a significant vulnerability. The `SKILL.md` instructions are benign and the core web scraping functionality is aligned with the stated purpose, contacting legitimate Sogou domains.
能力评估
Credentials
The script performs external HTTPS requests, rotates browser User-Agent strings, obtains cookies from a separate Sogou endpoint, and optionally performs per-result redirect and HTML/JavaScript link resolution; these are related to the search goal but are more evasive and under-scoped than a transparent search client.
Install Mechanism
SKILL.md recommends `npm install -g cheerio` without a pinned version or lockfile, which expands installation scope and makes dependency provenance non-reproducible.
Instruction Scope
The trigger text includes broader reference-material language that could invoke the skill for generic article research, and the documentation does not fully explain the cookie acquisition and anti-automation techniques used by the script.
Persistence & Privilege
No background service, startup persistence, privilege escalation, local credential access, or hidden local indexing was found; file writing is limited to a user-supplied output option, though it can overwrite the chosen path.
Purpose & Capability
The advertised purpose is searching WeChat public-account articles, and the script largely matches that by querying Sogou Weixin search, parsing titles, summaries, dates, sources, and links.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install wechat-article-search - 安装完成后，直接呼叫该 Skill 的名称或使用
/wechat-article-search触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release of wechat-article-search:
- Enables searching and retrieving WeChat official account articles across various topics, including technology, hot topics, finance, education, and workplace.
- Supports keyword-based search and returns article title, summary, publish date, source account, and accessible link.
- Offers command-line usage with options for result count, JSON output, and resolving real article URLs.
- Provides troubleshooting tips and best-practice notes for ethical and effective usage.
v0.0.1
Initial release of wechat-article-search skill.
- Enables searching for WeChat official account articles by keyword.
- Returns article title, summary, publication date, source account, and accessible link.
- Supports search result limits, output to JSON file, and real article URL resolution.
- Designed for users to quickly retrieve or organize WeChat article information across various fields.
- Includes command-line usage instructions and common troubleshooting tips.
元数据
常见问题
Wechat Article Search 是什么？
搜索微信公众号文章技能。通过微信搜索获取文章列表，覆盖科技/AI、社会热点、财经、教育、职场等各类中文资讯；可按关键词检索并返回标题、概要、发布时间、来源公众号与链接。当用户需要查找微信公众号文章、整理参考资料或快速获取文章信息时使用此技能。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 17807 次。
如何安装 Wechat Article Search？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install wechat-article-search」即可一键安装，无需额外配置。
Wechat Article Search 是免费的吗？
是的，Wechat Article Search 完全免费（开源免费），可自由下载、安装和使用。
Wechat Article Search 支持哪些平台？
Wechat Article Search 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Wechat Article Search？
由 无处不在（@wuchubuzai2018）开发并维护，当前版本 v0.1.0。
推荐 Skills