wechat-article-reader

读取微信公众号文章内容，返回标题、公众号名、发布时间和正文。 使用场景：(1) 用户发来 mp.weixin.qq.com/s/xxx 链接要求阅读或总结， (2) 用户提到"微信文章"、"公众号文章"、"帮我看看这篇"并附带微信链接， (3) 需要提取微信公众号文章内容进行分析、翻译或摘要。 不适用于：搜索公众...

This skill appears to do exactly what it promises (fetch and parse public WeChat article pages) and does not request secrets, but it will make outbound HTTP requests to whatever URL you give it. Before installing/using: 1) be aware that the agent’s network identity (IP, headers) will be revealed to the remote host; 2) the script validates links by substring, not by parsing the hostname — a malicious URL that merely contains "mp.weixin.qq.com" could be fetched instead of a real WeChat page (consider an attacker-crafted link); 3) if you need to restrict risk, run this skill in a network‑isolated environment or add a validation step (verify URL scheme is https and netloc equals mp.weixin.qq.com, follow a safe redirect policy); 4) don’t feed internal or sensitive URLs to the skill. If you want, I can suggest a small code change to strictly validate the hostname and reduce SSRF/IP‑leak risk.

Type: OpenClaw Skill Name: wechat-public-article-reader Version: 1.0.0 The skill provides a script `scripts/read_wechat.py` to fetch and parse WeChat articles, but it contains a vulnerability due to insufficient input validation. The URL check `if "mp.weixin.qq.com" not in url:` is a weak substring match that can be easily bypassed (e.g., `http://169.254.169.254/?x=mp.weixin.qq.com`), potentially allowing Server-Side Request Forgery (SSRF) attacks. While the code logic is aligned with the stated purpose, this lack of robust sanitization for network requests is a high-risk flaw.