Security audit
Security checks across malware telemetry and agentic risk
This is a real WeChat publishing tool, but it needs review because it can affect a live public account and has under-disclosed browser automation and unsafe credential guidance.
Install only after code review and preferably test with a dedicated WeChat account first. Keep config.yaml out of version control, use environment variables or a secret store for keys, avoid publish.js unless you intend browser-based admin automation, and use draft mode until a human verifies the exact account, content, images, and audience before any live publish.
img_url = result["output"]["results"][0]["url"]
logger.info(f"图片 URL: {img_url}")
img_response = requests.get(img_url, timeout=30)
img_response.raise_for_status()
logger.info("通义万相图片生成成功")
return img_response.contentimg_url = result["data"]["img_urls"][0]
# 下载图片
img_response = requests.get(img_url, timeout=30)
img_response.raise_for_status()
logger.info("文心一格图片生成成功")
return img_response.content# 下载图片
logger.info(f"下载 Unsplash 图片：{photo_url}")
img_response = requests.get(photo_url, timeout=30)
img_response.raise_for_status()
# 调整尺寸if img_url:
logger.info(f"图片 URL: {img_url[:100]}...")
img_response = requests.get(img_url, timeout=30)
img_response.raise_for_status()
# 如果需要缩放if img_url:
logger.info(f"图片 URL: {img_url[:100]}...")
img_response = requests.get(img_url, timeout=30)
img_response.raise_for_status()
logger.info("阿里百炼图片生成成功")
return img_response.content62/62 vendors flagged this skill as clean.
No suspicious patterns detected.