← 返回 Skills 市场
4044
总下载
5
收藏
36
当前安装
2
版本数
在 OpenClaw 中安装
/install wechat-mp-publisher
功能描述
远程微信公众号发布技能。通过 HTTP MCP 解决家用宽带 IP 变动问题，支持大文件上传、多主题排版与一键发布。
安全使用建议
Install only if you control or fully trust the configured wenyan-mcp server, prefer HTTPS with authentication, and are comfortable with that server receiving WeChat AppID/AppSecret and article content. Keep wechat.env out of version control with restrictive permissions, avoid the TOOLS.md credential path, and rotate credentials if they may have been exposed.
功能分析
Type: OpenClaw Skill
Name: wechat-mp-publisher
Version: 2.0.2
The skill is classified as suspicious due to the inherent risk of transmitting sensitive WeChat credentials (AppID and AppSecret) to a user-configured remote server (wenyan-mcp) as part of its core functionality, which relies heavily on the trustworthiness of that remote endpoint. While this is the stated purpose, it represents a significant trust boundary. Additionally, the `scripts/setup.sh` file contains a shell parsing vulnerability that could be exploited if the `TOOLS.md` file were maliciously crafted, and the `README.md` contains a misleading statement about credentials not being stored on disk, when they are present in `wechat.env`.
能力评估
Purpose & Capability
Publishing Markdown to a WeChat Official Account is coherent with the skill purpose, but it grants high-impact account authority and sends WECHAT_APP_ID/WECHAT_APP_SECRET plus article content to the configured remote wenyan-mcp service.
Instruction Scope
The docs disclose remote MCP use, but the example uses plain HTTP and does not clearly warn that credentials and unpublished content leave the local machine; README also claims credentials do not land on disk while SKILL.md instructs users to create wechat.env.
Install Mechanism
The manifest declares expected dependencies such as mcporter, curl, and jq, with no evidence of malicious install-time execution; users still need to create/manage local credential files.
Credentials
Credential use is expected for WeChat publishing, but sending long-lived AppSecret values to a user-configured remote server over the documented HTTP workflow is broader than many users would expect without stronger scoping and trust-boundary guidance.
Persistence & Privilege
The main persistent risk is local secret storage in wechat.env, and scripts/setup.sh still reads credentials from $HOME/.openclaw/workspace/TOOLS.md despite the current documentation presenting wechat.env as the isolated credential path.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install wechat-mp-publisher - 安装完成后，直接呼叫该 Skill 的名称或使用
/wechat-mp-publisher触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.0.2
合规性优化：移除不安全的全局凭证读取，改为专用配置 wechat.env；增加依赖检查与本地回退机制。
v2.0.1
wechat-mp-publisher 2.0.1
- Adds support for remote publishing to WeChat Official Accounts via HTTP MCP, solving home broadband IP change issues.
- Enables large file uploads, multi-theme article formatting, and one-click publishing.
- Centralizes style and theme management on the remote server with device-independent access.
- Installation and use instructions updated for seamless remote setup.
- Improves compatibility with wenyan-cli Frontmatter conventions.
元数据
常见问题
wechat-mp-publisher 是什么？
远程微信公众号发布技能。通过 HTTP MCP 解决家用宽带 IP 变动问题，支持大文件上传、多主题排版与一键发布。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 4044 次。
如何安装 wechat-mp-publisher？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install wechat-mp-publisher」即可一键安装，无需额外配置。
wechat-mp-publisher 是免费的吗？
是的，wechat-mp-publisher 完全免费（开源免费），可自由下载、安装和使用。
wechat-mp-publisher 支持哪些平台？
wechat-mp-publisher 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 wechat-mp-publisher？
由 MISAKIGA（@misakiga）开发并维护，当前版本 v2.0.2。
推荐 Skills