Security checks across malware telemetry and agentic risk
This skill can create WeChat articles, but it also has high-impact publishing and unsafe credential-handling behaviors that should be reviewed before installation.
Install only if you intend the agent to access your WeChat publishing credentials and create drafts/previews. Remove or rotate any credential-looking values, do not run commands that print API keys or dump .env files, use only a trusted HTTPS WeChat proxy you control, and require a manual review step before any WeChat draft or preview submission.
"""
try:
print(f"📥 Downloading image to: {output_path}")
response = requests.get(image_url, timeout=30)
response.raise_for_status()
# Create output directory if needed}
try:
response = requests.get(TOKEN_URL, params=params, headers=self._proxy_headers, timeout=10)
response.raise_for_status()
data = response.json()json_data = json.dumps(payload, ensure_ascii=False).encode('utf-8')
headers = {'Content-Type': 'application/json; charset=utf-8'}
headers.update(self._proxy_headers)
response = requests.post(url, data=json_data, headers=headers, timeout=30)
response.raise_for_status()
data = response.json()}
try:
response = requests.post(url, json=payload, headers=self._proxy_headers, timeout=30)
response.raise_for_status()
data = response.json()try:
with open(image_path, 'rb') as f:
files = {'media': (image_path.name, f, 'image/png')}
response = requests.post(url, files=files, headers=self._proxy_headers, timeout=60)
response.raise_for_status()
data = response.json()try:
with open(image_path, 'rb') as f:
files = {'media': (image_path.name, f, 'image/png')}
response = requests.post(url, files=files, headers=self._proxy_headers, timeout=60)
response.raise_for_status()
data = response.json()64/64 vendors flagged this skill as clean.