Wechat To Ima

Save WeChat Official Account articles into IMA notes with preserved article structure. Use when the user sends an mp.weixin.qq.com link and wants to save, ar...

This skill appears to implement its stated purpose, but exercise caution before installing/running it. Things to consider: 1) The registry metadata omitted required environment variables — you must provide IMA_OPENAPI_CLIENTID and IMA_OPENAPI_APIKEY; verify you trust the destination (ima.qq.com). 2) The Node extractor executes JavaScript snippets from fetched pages using new Function; this can execute code derived from untrusted web content — run the skill in a sandbox or isolated container and avoid feeding it untrusted or arbitrary URLs. 3) The Python script will load a local .env file from the skill directory and inject any keys it contains into the environment — ensure that .env does not contain unrelated or highly privileged secrets. 4) npm install will pull third-party packages — review package-lock or run in an environment where installing packages is safe. If you need higher assurance, ask the maintainer to (a) declare required env vars in registry metadata, (b) avoid executing page JS (or strongly sandbox it), and (c) document .env behavior; or run the tool manually in an isolated environment and review network traffic during an initial test.

Type: OpenClaw Skill Name: wechat-to-ima Version: 0.1.1 The skill is designed to extract WeChat articles and save them to IMA notes, but it contains a significant security vulnerability. Specifically, `scripts/extract.js` uses `new Function()` multiple times to execute JavaScript code extracted via regular expressions directly from the HTML of the provided URL. This creates a Remote Code Execution (RCE) risk if the agent is directed to a malicious URL designed to mimic a WeChat article. While this pattern is often used in WeChat scrapers to parse obfuscated metadata, it is inherently unsafe. No evidence of intentional malice, such as data exfiltration or backdoors, was found.