微信公众号发布器

当用户需要发布微信公众号文章、查看热点、配置公众号参数、生成文章内容、或运营微信公众号相关任务时，自动激活此技能。触发词包括：发公众号、微信推文、草稿箱、AppID、AppSecret、公众号运营、热点文章、wx-publish。

This skill's instructions expect you to supply and store WeChat AppID/AppSecret and media IDs in a plugin config file, but the skill's registry metadata doesn't declare or request those credentials — that's an inconsistency to resolve before installing. Before using/installing: 1) Ask the publisher (or inspect source) how and where credentials are stored and who can read them; prefer a place you control (not a shared plugin folder). 2) Don't paste AppID/AppSecret into anything until you confirm the skill's code or source; request source/homepage or repository. 3) Ask how the scheduled daily run is implemented and whether it requires explicit user consent each run. 4) If you must test, use a throwaway/weaker test account (not your production public account). 5) If the publisher cannot explain or provide source code, treat the skill as untrusted and avoid giving it credentials.

Type: OpenClaw Skill Name: wechat-publisher-3 Version: 0.1.0 The skill bundle for a WeChat publisher requires sensitive credentials (appId, appSecret) and performs automated network operations to scrape hot topics from platforms like Weibo, Baidu, and Zhihu. While these capabilities are aligned with the stated purpose, the handling of authentication secrets and broad network access are high-risk behaviors. Since the provided files (SKILL.md and _meta.json) lack the actual implementation code, it is impossible to verify if these credentials are handled securely or exfiltrated to an external endpoint.