Wechat Article To Markdown
v1.1.0This skill converts WeChat Official Account (微信公众号) article pages into high-quality, clean Markdown format. It should be used when the user provides a WeChat...
⭐ 0· 64·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name/description match the included Python script and reference docs: it fetches mp.weixin.qq.com pages, strips WeChat-specific noise, detects code blocks and images, and outputs Markdown. The code's network activity (page fetch + image downloads from CDN domains like mmbiz.qpic.cn) is consistent with the stated purpose.
Instruction Scope
SKILL.md describes running the included script and using convert_simple() programmatically; instructions do not ask the agent to read unrelated system files or solicit unrelated secrets. Note: SKILL.md's Step 1 omits installing Playwright and the necessary 'playwright install chromium' step even though the script's primary fetcher uses Playwright, which will cause runtime errors or surprising fallbacks to requests if Playwright is not present.
Install Mechanism
This is an instruction-only skill (no packaged installer). The code file uses standard Python libraries and Playwright; no external arbitrary downloads from unknown hosts are embedded in the skill. Because Playwright/Chromium may need to be installed manually, running the script can cause a Chromium download via Playwright tooling (this is expected for JS-rendered fetches).
Credentials
The skill declares no required environment variables or credentials and the code does not attempt to read secrets; network access is limited to fetching the article URL and its assets (images). No unrelated service tokens or config paths are requested.
Persistence & Privilege
always is false and the skill does not declare autonomous system-wide persistence. One implementation detail: Playwright is launched with launch_persistent_context(user_data_dir='') — using a persistent context may create a browser profile directory (depending on Playwright behavior) and could persist cookies/local storage between runs; this is plausible for convenience but worth noting.
Assessment
This skill appears to do what it says: fetch a WeChat article, clean it, convert it to Markdown, and optionally download images. Before running: 1) Be sure to install Playwright and run 'playwright install chromium' (SKILL.md omits this) or run with a mode that uses requests only; otherwise the script will fall back or error. 2) Expect network activity to the article host and image CDNs (e.g., mp.weixin.qq.com and mmbiz.qpic.cn) and disk writes for output and images — run inside an isolated environment if you want to limit exposure. 3) If you are concerned about persistent browser state, inspect/override the Playwright user_data_dir usage to avoid creating persistent profiles. 4) If you want higher assurance, review the remainder of the script (full file is large) or run it in a sandbox/VM. There are no red flags for credential exfiltration or unknown external endpoints in the provided files.Like a lobster shell, security has layers — review code before you run it.
latestvk975sxz9czw9dpbyz99h0m10jh84mtts
License
MIT-0
Free to use, modify, and redistribute. No attribution required.