Wewe Rss Reader

微信公众号文章阅读技能。当用户发来公众号文章链接、需要阅读理解文章内容时使用。通过本地部署的 WeWe RSS 服务获取文章全文并转为纯文本。Requires: 无（调用本地 REST API，首次部署见 references/deployment.md）。

Key considerations before installing/using this skill: - Trust and isolation: The skill expects you to run a locally-hosted service (wewe-rss on :4000 and a REST adapter on :4001). Only deploy the referenced repository (https://github.com/AxelHu/wewe-rss) in an environment you control; review api_server.py and docker-compose.yml before running them. - Missing declarations: The skill metadata doesn't list required binaries, but deployment requires git, docker/docker-compose, and Python 3.8+. Ensure these are available and run the service in an isolated environment (VM/container) if you have concerns. - QR/URL sharing: The login flow returns a confirmUrl/QR that the SKILL.md instructs to send to a Feishu group. Sending this URL/image to an external chat will expose an authentication flow (and possibly allow the holder to complete login). Only send it to recipients you trust, and ensure the agent uses an authenticated Feishu integration you control. - Workspace path and commands: The docs suggest running docker compose in ~/.openclaw/workspace/wewe-rss/. Make sure you understand and control that path; the agent's instructions to run shell commands could modify your local environment. - What to verify: (1) inspect api_server.py and docker-compose.yml for any unexpected outbound endpoints or credentials; (2) confirm no hidden remote endpoints are used (the skill should only call localhost:4001/4000); (3) decide how the agent will send the QR (provide a controlled message tool or do that step manually). Given these mismatches between documentation and declared requirements, proceed with caution — review the deployment artifacts and prefer running the service in an isolated environment before giving the agent runtime access to control it.

Type: OpenClaw Skill Name: wewe-rss-reader Version: 1.2.0 The skill contains instructions in SKILL.md for the agent to execute shell commands ('docker compose up -d') if a health check fails, which constitutes a risk of unauthorized command execution. It also relies on a specific external GitHub fork (AxelHu/wewe-rss) and includes a login flow that directs the agent to send authentication URLs to external messaging platforms (Feishu), introducing potential supply chain and phishing risks.