Zhy Wechat Writing

Use when generating a complete WeChat article from a topic, with optional source research, evidence tracking, illustration, HTML conversion, and draft-box pu...

This skill appears to do what it says (generate WeChat articles, gather sources, optionally add illustrations and save drafts). Before installing/using: (1) Review and separately inspect any auxiliary skills it calls (zhy-article-illustrator, zhy-markdown2wechat, zhy-wechat-publish) because those will likely require API keys/credentials and could upload data to third-party services. (2) Do NOT pass a full personal Chrome profile unless you understand the implications — prefer creating a minimal dedicated profile or using an official API/credential-based publish flow. (3) If you enable illustration upload (七牛/Qiniu) or publishing, confirm where images and article HTML will be uploaded and whether credentials are stored; provide least-privilege credentials. (4) Be aware the skill will crawl public web pages (and may attempt SERP scraping as a fallback); ensure you are comfortable with the agent fetching and storing scraped content in the articles/<slug>/ directory. (5) If you need higher assurance, ask for the auxiliary skills' SKILL.md/README files and their required env vars before enabling image upload or automatic draft publishing.

Type: OpenClaw Skill Name: zhy-wechat-writing Version: 0.1.0 The skill orchestrates a complex WeChat article creation workflow that includes web searching, content generation, and automated publishing. It exhibits high-risk behaviors such as executing external Node.js scripts via shell commands (Step 6, 7, and 8 in SKILL.md) and requesting access to a Chrome profile directory (wechat_profile_dir) to maintain login states. While these capabilities are plausibly necessary for the stated purpose of automating WeChat publishing, the combination of shell execution and access to sensitive browser data represents a significant security risk without further sandboxing.