WeChat MP Plus

Automate WeChat Official Account management with draft publishing, menu editing, auto-reply checking, and Markdown-to-HTML formatting.

This skill largely does what it says (WeChat MP management), but there are a few red flags to consider before installing or running it: - Metadata mismatch: the registry lists no required env vars, but the scripts require WECHAT_MP_APP_ID and WECHAT_MP_APP_SECRET. Don't trust the registry entry — provide those credentials only if you intend to connect to your WeChat Official Account. - Check .secrets behavior: the code will try to read a .secrets/wechat_mp.env file from specific locations (~/openclaw-workspace/.secrets/wechat_mp.env and a relative parent-level .secrets directory). If you keep secrets in a different path, the script may fail or may pick up other files unexpectedly. Ensure no sensitive credentials you don't want used are in those paths. - Pip auto-install: md2html.py will run pip to install 'markdown' and uses --break-system-packages. Run the scripts in an isolated virtualenv/container (or pre-install required packages) to avoid altering system packages. - Token cache: the access_token is cached in the system temp directory; if you need stricter controls, remove or relocate that cache. Recommendations: run in an isolated environment (virtualenv or container), verify/update the registry metadata to declare required env vars, inspect or remove any unexpected .secrets files under the paths the script checks, and consider removing the '--break-system-packages' behavior or preinstalling dependencies yourself.

Type: OpenClaw Skill Name: wechat-mp-plus Version: 1.0.0 The skill bundle is classified as suspicious due to a path traversal vulnerability in scripts/publish.py and scripts/md2html.py, where local image paths extracted from Markdown files are not sanitized before being read and uploaded to the WeChat API (api.weixin.qq.com). This could allow an attacker to exfiltrate sensitive local files by referencing them in a Markdown document. Additionally, scripts/md2html.py uses subprocess to automatically install the 'markdown' library via pip, which is a risky capability for dependency management. While these behaviors are aligned with the stated purpose of automating WeChat article publishing, the lack of path validation presents a meaningful security risk.