← Back to Skills Marketplace
abigale-cyber

WeChat Studio

by Abigale-cyber · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
95
Downloads
1
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install content-system-wechat-studio
Description
Launch a local WeChat article workbench for Markdown import, WeChat HTML preview, theme tuning, image selection, and optional draft push. Use when Codex need...
README (SKILL.md)

WeChat Studio

Use wechat-studio as the manual workbench between generated article assets and final publishing. On ClawHub, this skill is published as content-system-wechat-studio.

Quick Start

Install the shared Python dependencies and the workbench frontend dependency:

.venv/bin/pip install -r requirements.txt
cd skills/wechat-studio/frontend && npm install

Start the local server:

python3 skills/wechat-studio/frontend/server.py

Open the workbench in the browser:

http://127.0.0.1:4173

The image defaults shown in the settings page should reflect the adjacent generate-image runtime:

provider: openai
api base: https://new.suxi.ai/v1
model: nano-nx

Use This Skill When

  • You need a local WeChat preview before publishing
  • You want to import Markdown into a reusable article workspace
  • You want to adjust theme, typography, and layout manually
  • You need to review cover images or inline image slots
  • You want to push a checked article into the WeChat draft box

Default Workflow

  1. Start the server and open the local workbench.
  2. Import a Markdown article or switch to an existing article workspace.
  3. Review the generated WeChat preview and article metadata.
  4. Tune theme, typography, cover, and inline images.
  5. Push the final checked version to the WeChat draft box if needed.

Use the settings page to distinguish:

  • configured image values from the current md2wechat setup
  • effective image values that generate-image actually injects at runtime

Related Skills

  • wechat-formatter provides the WeChat HTML render step
  • generate-image provides the article companion images
  • case-writer-hybrid and humanizer-zh typically feed the upstream article draft

Notes

  • This is a workbench skill, not a pure one-shot executor
  • Draft push depends on the local WeChat publishing configuration already being available
  • Article workspaces live under skills/wechat-studio/content/articles/
  • Users with an existing 香蕉制作平台 can use it directly
  • Users without one can open job.suxi.ai, generate an SK, place it into the token field, and log in
Usage Guidance
What to consider before installing/running: - Inspect the shipped server.py and frontend code before running. Look for network calls (requests, urllib, fetch, axios, sockets), any base64 decode/exec behavior, or code that reads system paths or environment variables. - The skill's docs and previews reference MD2WECHAT_API_KEY and an image provider (openai via https://new.suxi.ai). Even though the skill metadata lists no required env vars, the code likely expects API keys — do not supply high‑privilege credentials (AWS, personal OpenAI keys, etc.) without reviewing the code and limiting token scope. - The SKILL.md suggests obtaining an 'SK' from job.suxi.ai and entering it into the UI; that is an external third‑party service. Be cautious about giving any tokens or secrets to third parties and prefer test/least-privilege tokens. - Run the server in an isolated environment (container or VM) and with a non-privileged user. Monitor outbound network connections during initial runs to detect unexpected exfiltration attempts. - Because code is bundled, prefer to read the full server.py for any hardcoded endpoints, logging or telemetry, and check templates for absolute paths or leaked local info (the previews show /Users/Abigale/...). If you are not comfortable auditing the code, avoid running it on sensitive hosts. - If you plan to use external APIs, create separate limited-scope API keys for this tool and revoke them after testing. Confidence notes: I flagged inconsistencies between declared metadata (no env vars) and the runtime files (which reference API keys/third-party endpoints) and a prompt-injection signal was found. I did not perform a full dynamic analysis of server.py; reviewing that file for outbound calls and decoding logic would raise confidence one way or another.
Capability Analysis
Type: OpenClaw Skill Name: content-system-wechat-studio Version: 1.0.1 The skill bundle contains a significant path traversal vulnerability in `frontend/server.py`. The `resolve_workspace_path` function fails to properly sanitize relative paths containing '..', allowing the `/api/assets` endpoint to read arbitrary files from the host system. Additionally, `frontend/extract_live_reference.js` utilizes Playwright to visit arbitrary user-provided URLs, which poses a risk of Server-Side Request Forgery (SSRF). The bundle also includes hardcoded local user paths (e.g., `/Users/Abigale/...`) and directs users to external services like `suxi.ai`, which may indicate improper packaging or environment-specific risks.
Capability Assessment
⚠ Purpose & Capability
Name/description describe a local workbench. That purpose would not normally require undisclosed external API keys or third‑party service tokens, but the SKILL.md and preview files reference MD2WECHAT_API_KEY, an image provider (openai via https://new.suxi.ai/v1), and an external job.suxi.ai SK — these credentials are not declared in the skill metadata, creating an incoherence.
⚠ Instruction Scope
Runtime instructions ask you to pip/npm install and run a local server (expected). They also instruct how to provide an external 'SK' from job.suxi.ai and show an API provider block (provider: openai, api base: https://new.suxi.ai/v1) — the skill will likely call out to external services and expects API keys. The SKILL.md does not explicitly constrain what files or env vars the server will access; the included preview HTML already references MD2WECHAT_API_KEY and absolute user paths, suggesting templates or server code may surface local paths.
ℹ Install Mechanism
No automated install spec is declared (instruction-only install commands are in SKILL.md). Code files are bundled with the skill (server.py, frontend JS/Python), so running the server will execute shipped code. No remote download/install of third‑party binaries was specified, which reduces supply-chain risk, but running bundled server code still executes non-reviewed code locally.
⚠ Credentials
Skill metadata declares no required environment variables or credentials, but the SKILL.md and template previews reference MD2WECHAT_API_KEY and an image-generation provider (openai api base at new.suxi.ai). That mismatch is disproportionate and unexpected — the skill may require secrets to operate despite none being declared.
ℹ Persistence & Privilege
always:false (no force inclusion) and normal model invocation settings. The skill does not request elevated platform privileges in metadata. However, it runs a local server process from bundled code which will run with the invoking user's local privileges — treat this as standard but significant local execution risk.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install content-system-wechat-studio
  3. After installation, invoke the skill by name or use /content-system-wechat-studio
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Show configured vs effective image backend, default to Banana nano-nx, and add SK login guidance
v1.0.0
Publish auxiliary content-system skills
Metadata
Slug content-system-wechat-studio
Version 1.0.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is WeChat Studio?

Launch a local WeChat article workbench for Markdown import, WeChat HTML preview, theme tuning, image selection, and optional draft push. Use when Codex need... It is an AI Agent Skill for Claude Code / OpenClaw, with 95 downloads so far.

How do I install WeChat Studio?

Run "/install content-system-wechat-studio" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is WeChat Studio free?

Yes, WeChat Studio is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does WeChat Studio support?

WeChat Studio is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created WeChat Studio?

It is built and maintained by Abigale-cyber (@abigale-cyber); the current version is v1.0.1.

More Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 Comments