公众号草稿 / 发布(微信 API)

• Analyzed: Apr 22, 2026, 11:41 PM
• Findings: 1
• Version: 1.0.22
• Hash: aaaede2920b937331f72440fc057a8b5a7b1bd64f6fe88a15a724bcbb5bf113e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate set of tools for automating article publishing to WeChat Official Accounts via official APIs. It includes scripts for metadata management (article_init.py), draft retrieval (getdraft.py), and a full publishing workflow (publish.py) that handles image compression and multi-account support. While the skill requires access to sensitive credentials (WECHAT_APPID/SECRET) and network permissions, these are used exclusively for interacting with the WeChat API (api.weixin.qq.com) as described. The SKILL.md instructions define a structured workflow with mandatory environment checks and user confirmations, showing no signs of malicious intent or prompt injection.