Aws Wechat Article Formatting

v1.0.0

给公众号文章排版,转换为可直接粘贴到微信后台的格式,支持多套主题。当用户提到「排版」「版式」「美化」「格式化」「字号」「段落样式」「换个主题」「转 HTML」「弄好看点」「调整格式」时使用。

0· 44·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description (WeChat article formatting) align with the included script (scripts/format.py), built-in themes, and SKILL.md instructions. The script and docs read article.md, .aws-article/config.yaml, optional article.yaml, closing.md, and theme files — all expected for a formatting tool. Minor metadata inconsistency: registry header said Homepage: none while skill.json contains a homepage URL, but this is an administrative mismatch rather than a security issue.
Instruction Scope
SKILL.md instructs the agent to run format.py on article.md and to consult .aws-article config and per-article YAMLs; it does not instruct reading unrelated system secrets or transmitting data externally. It does reference a 'first-time-setup' doc in another skill directory (aws-wechat-article-main) which is an undeclared dependency in the registry metadata — this is scope-related but not obviously malicious.
Install Mechanism
No install spec is provided (instruction-only with a bundled script). No downloads, package installs, or archive extraction are requested. This is a low-risk install model.
Credentials
The skill does not declare required environment variables or credentials. skill.json requests 'filesystem' and 'shell' permissions which are reasonable for a local formatting tool that runs a Python script and reads/writes files. Note: the tool searches user-specific theme locations including Path.home() (~/.aws-article), which means it will enumerate theme files in the user's home; this is expected but increases the filesystem surface the tool can read.
Persistence & Privilege
always is false and the skill does not request persistent autonomously-elevated privileges. There is no indication it modifies other skills or system-wide agent settings. Autonomous invocation is allowed (default) which is normal for skills.
Assessment
This skill appears to do exactly what it says — convert Markdown into WeChat-compatible HTML using themes — and it requires only local filesystem/shell access. Before installing: 1) Inspect scripts/format.py yourself (or run it in an isolated environment) to confirm there are no unexpected network calls or subprocesses that contact external endpoints; the provided snippet did not show network access but the file content was partially truncated in the listing. 2) Avoid running it on sensitive files or directories; the tool reads .aws-article/config.yaml and may read theme files under your home directory (~/.aws-article). 3) If you want to limit exposure, grant filesystem access only to the project directory rather than whole-home access. 4) If you will use custom themes, review any user-provided theme YAMLs for unexpected templates. 5) Note the SKILL.md references a 'first-time-setup' doc in another skill — ensure you have that other skill or understand what checks it performs. If you want higher assurance, request the complete, untruncated scripts/format.py contents and I can re-check for hidden network calls or unexpected behavior.

Like a lobster shell, security has layers — review code before you run it.

latestvk9772pxeakzpryrxxad64x1dzx841kt1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments