wxgzh-mcp

微信公众号草稿创建与管理技能，支持图片上传、创建草稿、发布等操作。需配置 AppID、AppSecret、白名单 IP。

This skill appears to implement the advertised WeChat draft and media features, but review these before installing: 1) Provide AppID/AppSecret only via a secure config.json and do not store the file in an unsecured/shared folder; the registry metadata did not declare these credentials so verify config handling. 2) The repo includes docker-compose.yml but no Dockerfile in the manifest — docker-compose build may fail; ask the author for the Dockerfile or use the pip-based instructions in README/SKILL.md instead. 3) Running this will start a FastMCP server and (per compose) expose port 8765 — run inside an isolated environment or restrict network access. 4) Verify the fastmcp package source and version before installing (supply-chain risk). 5) If you must run it, do so in a container/VM with limited privileges, keep config.json protected, and avoid mounting host directories with sensitive data.

Type: OpenClaw Skill Name: wxgzh-mcp Version: 1.0.0 The skill provides legitimate WeChat Official Account management functionality but contains a significant security vulnerability regarding local file access. The `upload_image` and `upload_thumb` tools in `src/tools/media.py` (implemented in `src/wechat_api.py`) accept arbitrary local file paths and upload the contents to WeChat's servers without any path validation or sandboxing. This allows for potential path traversal attacks where an agent could be coerced into exfiltrating sensitive system files (e.g., credentials or configuration files) by uploading them to the WeChat platform.