← 返回 Skills 市场
chenjiahui11

Weixin WeChat Channel

作者 GaoBai · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
885
总下载
6
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install weixin-wechat-channel
功能描述
微信公众号自动发文一站式技能。组合 内容策划 + 人性化润色 + 自动创建草稿,一条龙生成公众号文章保存到草稿箱。Use when user needs to write 公众号文章、微信公众号、create wechat public account article, auto save to draft。
安全使用建议
This package looks like a paid "WeChat auto-draft" skill, but there are several red flags you should consider before using it: (1) The registry metadata does not list the WECHAT_APPID/WECHAT_APPSECRET the SKILL.md says are required — ask the publisher to correct metadata. (2) The included code contains only a license gate; there is no code here that actually calls WeChat APIs to create drafts — request the source or proof of the actual draft-creation implementation. (3) The license activation contacts a default IP address over plain HTTP and will send your card key and a machine fingerprint in cleartext — this is insecure. Only provide real secrets or card keys if you trust the vendor and the transport is secure (HTTPS) or you can use a self-hosted license server. (4) If you decide to test it, run it in an isolated environment and do not use real WECHAT_APPSECRET or production account credentials until you have audited the code and confirmed secure transport and the presence of legitimate WeChat API calls. (5) Ask the author for a trustworthy homepage or repository, a TLS-protected license server, and a transparent explanation of where WeChat integration is implemented; without that, treat the package as untrusted.
功能分析
Type: OpenClaw Skill Name: weixin-wechat-channel Version: 1.0.2 The skill implements a remote licensing and DRM (Digital Rights Management) mechanism that requires a paid 'card key' for operation, as detailed in SKILL.md. The script scripts/license_gate.py collects hardware-specific data (MAC address, hostname, and system info) to generate a machine fingerprint, which is then transmitted to a hardcoded remote IP (120.27.202.105). While this behavior is aligned with the developer's stated commercial model, the collection of hardware identifiers and the requirement for remote 'phone-home' validation are high-risk behaviors that warrant caution.
能力评估
Purpose & Capability
The SKILL.md promises end-to-end WeChat draft creation (requires WECHAT_APPID/WECHAT_APPSECRET), which is coherent for the stated purpose. However the registry metadata lists no required env vars or credentials (mismatch). The included Python code contains only a license gate and no implementation that interacts with the WeChat API or uploads media/creates drafts — so the package does not contain the core capability it claims to provide.
Instruction Scope
Runtime instructions instruct users to run the provided script to activate a license and mention using WECHAT_APPID/WECHAT_APPSECRET and IP whitelisting. The license flow prompts for a card key and will POST the key and a machine fingerprint to a remote license server. The SKILL.md does disclose '联网验证' and a default license server, but there are no runtime instructions or code in the package that actually perform the promised draft creation; the instructions give the agent or user wide discretion (rely on external 'humanizer' and other capabilities not included).
Install Mechanism
There is no installer — the skill is instruction-only and includes two Python scripts. No third-party packages are pulled during install. This is lower risk in terms of arbitrary downloads, but the bundled scripts perform network calls at runtime (license server), which introduces runtime risk.
Credentials
SKILL.md declares that WECHAT_APPID and WECHAT_APPSECRET are required; that is proportionate to the claimed WeChat-draft capability. However the registry metadata lists no required env vars (incoherent). The license code also reads TMO_LICENSE_SERVER from the environment, and the license flow collects machine identifiers and a card key and transmits them over plain HTTP to a default IP — that is sensitive and not clearly justified beyond commercial license checking.
Persistence & Privilege
always:false and disable-model-invocation default are fine. The skill writes a local license file (license/license.json) to persist activation state — expected for commercial licensing. It does not request system-wide privileges or attempt to modify other skills' config.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install weixin-wechat-channel
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /weixin-wechat-channel 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
联网验证 + 购买卡密信息
v1.0.0
功能: 一站式从主题到公众号草稿,不用分步操作 自动内容策划符合内容运营逻辑 自动去除 AI 写作痕迹,文章更像真人写的 自动处理段落空格,保证微信显示美观 自动封面上传,创建草稿 要求: 已经配置好 和WECHAT_APPIDWECHAT_APPSECRET IP 白名单已经添加正确 Python 依赖 已安装requests pillow
元数据
Slug weixin-wechat-channel
版本 1.0.2
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 2
常见问题

Weixin WeChat Channel 是什么?

微信公众号自动发文一站式技能。组合 内容策划 + 人性化润色 + 自动创建草稿,一条龙生成公众号文章保存到草稿箱。Use when user needs to write 公众号文章、微信公众号、create wechat public account article, auto save to draft。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 885 次。

如何安装 Weixin WeChat Channel?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install weixin-wechat-channel」即可一键安装,无需额外配置。

Weixin WeChat Channel 是免费的吗?

是的,Weixin WeChat Channel 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Weixin WeChat Channel 支持哪些平台?

Weixin WeChat Channel 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Weixin WeChat Channel?

由 GaoBai(@chenjiahui11)开发并维护,当前版本 v1.0.2。

💬 留言讨论