zhihu-to-wechat

全自动知乎热榜选题 → IT科技风格公众号文章生成 → 自动配图 → 微信服务号发布工作流。 当用户提到"知乎热点"、"公众号文章"、"帮我写公众号"、"热榜选题"、"微信推文"、"IT科技文章"、 "发布公众号"等场景时，必须触发此skill。适用于科技博主、IT自媒体、技术内容创作者。

This skill appears to implement the advertised Zhihu→WeChat publishing workflow, but exercise caution before enabling it: 1) It requires sensitive credentials (WECHAT_APP_ID, WECHAT_APP_SECRET) and an image API key (Unsplash/Pexels). The registry metadata did not declare these — verify you are comfortable providing them. 2) The SKILL.md suggests saving secrets in the conversation context (not recommended). Prefer supplying credentials via environment variables or CLI args and avoid pasting AppSecret into chat history. 3) The publisher script caches the access token to ~/.wechat_token_cache.json — review and secure or delete that file if needed. 4) Because the skill executes bundled Python scripts that perform network downloads/uploads, review the scripts yourself or run them in an isolated environment (container/VM) before giving real credentials. 5) Confirm your WeChat service account has the required permissions and quotas, and be mindful of Unsplash/Pexels API rate limits. If you need higher assurance, ask the publisher to (a) update the manifest to list required env vars and primary credential, (b) remove the instruction to store secrets in conversation context, and (c) optionally provide a minimal audit or signed release of the code.

Type: OpenClaw Skill Name: zhihu-to-wechat Version: 1.0.0 The 'zhihu-to-wechat' skill bundle is a legitimate automation workflow for content creators. It scrapes Zhihu hot topics, generates articles, fetches images from Unsplash/Pexels, and publishes drafts to WeChat. While it handles sensitive credentials (WECHAT_APP_ID/SECRET), they are used exclusively for official API interactions as described in 'wechat_publisher.py' and 'fetch_images.py'. The code is well-structured, lacks obfuscation, and the instructions in 'SKILL.md' are transparent and align with the stated purpose without any signs of malicious intent or prompt injection.