WeChat Articles Reader

Read and summarize WeChat Official Account articles (微信公众号文章) by URL. Bypasses WeChat's anti-bot detection to extract full article text, title, author, date,...

This skill appears to do what it claims (fetch and screenshot WeChat articles by evading anti-bot checks). Main concerns: (1) the SKILL.md mandates always sending a screenshot — that can leak images of pages that may include private or sensitive information, even if the user didn't ask for an image; (2) the code performs filesystem searches to locate node modules (normal for dependency resolution, but it reads local paths); and (3) the skill author and homepage are unknown. Before installing: review the two included scripts yourself, consider running the skill in an isolated environment, and/or modify the SKILL.md to make screenshotting opt-in (or require explicit user consent before sending images). If you will run this in a production/chat environment, prefer a manual confirmation step before sending screenshots and ensure the host has only the minimum necessary access.

Type: OpenClaw Skill Name: wxmp-reader Version: 1.0.0 The skill contains a potential shell injection vulnerability in 'fetch_wechat.js' and 'screenshot_wechat.js' because they use 'execSync' to execute a 'find' command using unquoted environment variables (NVM_DIR and HOME) to locate dependencies. While the scripts' primary logic for bypassing WeChat's anti-bot detection is well-documented and aligned with the stated purpose, the use of shell execution for dependency discovery is a risky implementation flaw. Additionally, the 'SKILL.md' instructions contain rigid directives that force the agent to always capture and send screenshots even if the user only requests a text summary.