← Back to Skills Marketplace
wechat-article-explainer
by
chenhao11235813
· GitHub ↗
· v1.0.1
· MIT-0
358
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install wechat-article-explainer
Description
微信公众号文章通俗内容解释技能。当用户需要总结或解释微信公众号链接或url时使用这个技能。技能包含：根据用户提供的链接或URL，读取链接内容，用通俗的语言解释内容。
Usage Guidance
This skill appears to do exactly what it claims, but take a few precautions before using it in production: 1) Inspect scripts/wechat_reader.py yourself (it's included) and confirm you are comfortable running it. 2) Install dependencies from official sources (pip and the official Playwright install) and be aware Playwright will download a browser binary. 3) Prefer running the script in a sandboxed environment (or without browser mode: --no-browser) if you are worried about untrusted page JavaScript or network access. 4) Only provide trusted mp.weixin.qq.com links; because the script will attempt any URL it's given, it could be used to probe internal services (SSRF) if the agent has network access to non-public hosts. 5) If provenance is important, ask the publisher for source/origin details — the registry metadata shows an owner id but no homepage.
Capability Analysis
Type: OpenClaw Skill
Name: wechat-article-explainer
Version: 1.0.1
The skill is designed to scrape and summarize WeChat articles using a Python script (scripts/wechat_reader.py) and Playwright. While the Python code itself is functional and lacks malicious logic, the instructions in SKILL.md introduce a shell injection vulnerability by directing the AI agent to execute a command-line tool using user-provided input without explicit sanitization (python3 scripts/wechat_reader.py "<文章链接>"). This pattern allows for potential command execution if a user provides a URL containing shell metacharacters.
Capability Assessment
Purpose & Capability
The name/description, SKILL.md, requirements.txt, and scripts/wechat_reader.py are consistent: the skill fetches WeChat article pages and extracts title, author, date, and content. Required dependencies (requests and optionally playwright) align with the stated approach (direct HTTP or browser emulation). No unrelated environment variables or credentials are requested.
Instruction Scope
SKILL.md explicitly instructs running scripts/wechat_reader.py on mp.weixin.qq.com article URLs, which the code supports. However, the script does not strictly enforce the domain — if given an arbitrary URL it will attempt to fetch it. That means an attacker or a careless user could cause the agent to request arbitrary network endpoints (SSRF/probing). Also, using Playwright runs a full browser and executes page JavaScript from remote pages (normal for scraping, but increases the attack surface). SKILL.md does warn about anti-leeching and suggests using browser mode or asking the user to copy content when fetch fails.
Install Mechanism
There is no automated install spec; dependencies are listed in requirements.txt. Installing Playwright requires an additional browser install step (playwright install chromium). All installs are from standard Python packages (pip). No downloads from obscure URLs or arbitrary extract operations are present in the package.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The level of access requested (networking to fetch public web pages) is proportional to the stated purpose.
Persistence & Privilege
always is false and the skill does not request persistent platform privileges. It contains a runnable script but does not attempt to modify other skills or global agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install wechat-article-explainer - After installation, invoke the skill by name or use
/wechat-article-explainer - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Updated skill metadata format for clarity and standardization.
- Moved wechat_reader.py into the scripts/ directory.
- Added .clawhub/origin.json and _meta.json files for better configuration and management.
- Removed the old wechat_reader.py from the root directory.
- Adjusted usage instructions to reflect new script location.
v1.0.0
- Initial release of the 微信公众号文章总结 skill.
- Automatically summarizes the content of WeChat articles in plain language.
- Validates article links and uses a Python tool to extract content.
- Supports both HTTP and browser (Playwright) extraction modes.
- Provides clear installation and usage instructions.
- Handles extraction failures with user-friendly prompts.
Metadata
Frequently Asked Questions
What is wechat-article-explainer?
微信公众号文章通俗内容解释技能。当用户需要总结或解释微信公众号链接或url时使用这个技能。技能包含：根据用户提供的链接或URL，读取链接内容，用通俗的语言解释内容。 It is an AI Agent Skill for Claude Code / OpenClaw, with 358 downloads so far.
How do I install wechat-article-explainer?
Run "/install wechat-article-explainer" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is wechat-article-explainer free?
Yes, wechat-article-explainer is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does wechat-article-explainer support?
wechat-article-explainer is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created wechat-article-explainer?
It is built and maintained by chenhao11235813 (@chenhao11235813); the current version is v1.0.1.
More Skills