← 返回 Skills 市场
WeChat MP Assistant
作者
jason-aka-chen
· GitHub ↗
· v1.0.0
· MIT-0
118
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install wechat-mp-assistant-chen
功能描述
WeChat Official Account Manager - Automatically generate articles, images, SEO optimization, and data analysis. Supports end-to-end operations from topic sel...
安全使用建议
This skill claims to manage and publish to WeChat Official Accounts but does not declare the AppID/Secret or provide the runtime code it references. Before installing or running this skill: (1) ask the publisher for a homepage or source repository and a clear list of required credentials (e.g., WECHAT_APPID, WECHAT_SECRET) and how they are stored/used; (2) do not enter long-lived account secrets until you verify the code; prefer short-lived tokens or a least-privilege account for publishing; (3) be cautious about allowing the agent to pip-install packages — inspect the exact packages and versions (and ideally pin them) and review their source; (4) clarify which image-generation or multi-platform services are used and what additional credentials they require; (5) if you cannot verify the source, run the skill in a sandboxed environment or decline installation. These gaps make the package suspicious rather than clearly benign.
功能分析
Type: OpenClaw Skill
Name: wechat-mp-assistant-chen
Version: 1.0.0
The skill bundle contains standard metadata and documentation for a WeChat Official Account management tool. The SKILL.md file describes legitimate features such as content generation and data analysis using established libraries like 'wechatpy', and lacks any indicators of malicious intent, data exfiltration, or prompt injection attacks.
能力评估
Purpose & Capability
The declared purpose (manage WeChat Official Accounts: generate/publish content, analyze data) is plausible, and the SKILL.md describes relevant features. However, the skill metadata declares no required credentials or config paths even though the instructions show an appid/secret JSON and describe publishing — a WeChat integration legitimately needs those credentials. Also the SKILL.md references a Python module 'mp_assistant' which is not included and not referenced in the registry metadata or a homepage, so it's unclear where runtime code comes from.
Instruction Scope
The SKILL.md tells the agent to install packages (pip install requests wechatpy), configure an appid/secret, and run code that imports 'mp_assistant' to generate and publish content. Because no code files are provided, the instructions implicitly require fetching or installing code from external sources (e.g., PyPI or the internet). The instructions do not limit what external endpoints or image-generation services to use for AI images or multi-platform sync, granting broad discretion to contact arbitrary services. The instructions also perform actions (publishing) that require secrets but do not declare or restrict how those secrets are handled.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md recommends pip installing requests and wechatpy. Suggesting pip installs is common, but installing packages at runtime pulls remote code (PyPI) that will execute locally; because the skill provides no fixed source for the 'mp_assistant' module, the agent might attempt to pip-install unknown packages or fetch code from untrusted locations. This raises moderate risk but is expected for a Python-based integration unless a pinned/verified package or source is provided.
Credentials
The instructions explicitly require an Official Account AppID and Secret (sensitive credentials), but the skill metadata lists no required env vars or primary credential. That's a mismatch: a WeChat publish workflow needs those secrets, and the registry should declare them and justify their scope. Additionally, other capabilities mentioned (image generation, multi-platform sync) likely need additional credentials or third-party API keys that are not declared.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-wide privileges in the metadata. There is no install spec that writes files or modifies other skills' configurations. This dimension shows no elevated privilege by itself.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install wechat-mp-assistant-chen - 安装完成后,直接呼叫该 Skill 的名称或使用
/wechat-mp-assistant-chen触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of WeChat Official Account Assistant.
- Automates article and image generation with SEO optimization and hot topic analysis.
- Provides data analysis features including read counts, follower tracking, and competitor analysis.
- Supports scheduled posting, multi-platform synchronization, and comprehensive data statistics.
- Workflow guides users from topic selection to publication.
- Designed for self-media operators, enterprise accounts, and individual content creators.
元数据
常见问题
WeChat MP Assistant 是什么?
WeChat Official Account Manager - Automatically generate articles, images, SEO optimization, and data analysis. Supports end-to-end operations from topic sel... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 118 次。
如何安装 WeChat MP Assistant?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install wechat-mp-assistant-chen」即可一键安装,无需额外配置。
WeChat MP Assistant 是免费的吗?
是的,WeChat MP Assistant 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
WeChat MP Assistant 支持哪些平台?
WeChat MP Assistant 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 WeChat MP Assistant?
由 jason-aka-chen(@jason-aka-chen)开发并维护,当前版本 v1.0.0。
推荐 Skills