Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
微信公众号文章处理器
v1.0.0微信公众号文章处理工具 - 自动抓取、结构化整理、保存到飞书文档。触发词：处理公众号文章、微信文章转飞书、公众号链接
⭐ 0· 64·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name and description match the code and SKILL.md: both focus on fetching a WeChat article, structuring it and creating a Feishu doc. However, the included Python script only parses browser output and does not perform the Feishu document creation mentioned in the SKILL.md, so implementation is incomplete relative to claimed capability.
Instruction Scope
SKILL.md explicitly instructs the agent to use a browser tool to fetch content and a feishu_create_doc action to save the processed article. These instructions stay within the stated purpose (scrape → parse → save). It also notes login/captcha limitations and instructs to ask the user to copy content if captcha encountered, which is appropriate. No instructions request unrelated files, system credentials, or exfiltration to unknown endpoints.
Install Mechanism
This is an instruction-only skill with one small helper script and no install spec. Nothing is downloaded or written to disk by an installer — lowest-risk install footprint.
Credentials
SKILL.md states '需要飞书授权' (Feishu authorization) and instructs use of feishu_create_doc, but the skill metadata lists no required environment variables or primary credential. The code file also contains no Feishu integration. The absence of declared credential requirements is an inconsistency: saving to Feishu will require authentication (token/credential), but the skill does not declare how that credential is provided or scoped.
Persistence & Privilege
The skill is not always-enabled and requests no special persistent privileges. It does not modify other skills or system-wide settings and does not require permanent presence.
What to consider before installing
This skill appears to do what it says (fetch, parse, format WeChat articles) but there are two practical mismatches you should resolve before installing: (1) the SKILL.md says it will create a Feishu document and requires Feishu authorization, yet no Feishu credential is declared in the metadata and the included Python script does not perform any Feishu API calls; (2) the integration depends on the agent's browser tool being able to access the article (login/captcha may block full fetch). Before installing, ask the author to clarify how Feishu authentication is expected to be provided (which environment variable or platform connector, and required scopes), and whether the skill will handle uploads automatically or requires platform-level feishu_create_doc capability. Test with non-sensitive public articles first, and do not provide Feishu tokens until you confirm exactly how they are used and stored.Like a lobster shell, security has layers — review code before you run it.
articlevk97aya1d2t4adjwjf724nv2vyn83zqrpfeishuvk97aya1d2t4adjwjf724nv2vyn83zqrplatestvk97aya1d2t4adjwjf724nv2vyn83zqrpwechatvk97aya1d2t4adjwjf724nv2vyn83zqrp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📱 Clawdis