Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Wechat Article Search

v0.1.0

搜索微信公众号文章技能。通过微信搜索获取文章列表,覆盖科技/AI、社会热点、财经、教育、职场等各类中文资讯;可按关键词检索并返回标题、概要、发布时间、来源公众号与链接。当用户需要查找微信公众号文章、整理参考资料或快速获取文章信息时使用此技能。

23· 9.9k·82 current·86 all-time
by无处不在@wuchubuzai2018
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description claim a WeChat article search via web search; the included script and SKILL.md implement HTTP scraping of sogou/weixin pages and HTML parsing with cheerio, which is proportional to the stated purpose.
Instruction Scope
SKILL.md instructs running the included Node script and installing cheerio. The runtime instructions only describe making HTTP requests to search pages, optionally resolving redirect links and writing JSON output — they don't instruct reading arbitrary local files or accessing unrelated environment variables.
Install Mechanism
No formal install spec (instruction-only), which minimizes install risk. SKILL.md suggests global npm install -g cheerio; this is unnecessary and a poor practice (local install preferred) but not malicious. No downloads from untrusted URLs or archive extraction are present.
Credentials
The skill requires no credentials or environment variables. The script uses only built-in Node modules and cheerio for HTML parsing; no secrets or unrelated service tokens are requested.
Persistence & Privilege
Skill does not request permanent presence or special agent privileges (always:false). It does not modify other skills or system-wide configs and contains no self-enabling behavior in the files provided.
Assessment
This skill appears to do exactly what it says: scrape Sogou/Weixin search pages and parse article metadata. Before installing or running: (1) review the included script yourself or run it in a sandbox, since the source has no homepage and origin is unknown; (2) be aware this is a web‑scraper — excessive or automated use can violate site terms of service and lead to IP blocking; (3) install cheerio locally (npm install cheerio) instead of using -g; (4) the tool makes direct HTTPS requests to sogou/weixin domains (and follows redirect logic) but does not exfiltrate data to other endpoints or read your machine's secrets; (5) if you need stronger assurance, ask the author for a homepage/repository or run dynamic monitoring (network logs) while executing.

Like a lobster shell, security has layers — review code before you run it.

latestvk976d35enebtys1qt2y1bwpwed814p4g
9.9kdownloads
23stars
2versions
Updated 8h ago
v0.1.0
MIT-0

微信公众号文章搜索说明

适用场景

  • 用户说“帮我搜某个关键词的公众号文章/最近文章”
  • 需要快速拿到:标题、摘要、发布时间、公众号名称、可访问链接

工作流程

步骤1: 确认已安装依赖包

该脚本依赖NodeJS依赖包 cheerio,建议先执行全局安装或在项目中安装:

npm install -g cheerio

步骤2: 确认搜索词语数量

1、 确认关键词与数量

步骤3: 执行搜索命令

1、执行常规搜索命令

node scripts/search_wechat.js "关键词" 

特殊流程(可选)

  1. 执行包含数量限制的搜索命令
node scripts/search_wechat.js "关键词"  -n 15
  1. 如果用户需要保存结果到文件,执行命令
node scripts/search_wechat.js "关键词" -n 20 -o result.json
  1. 若想要获取微信文章域名的真实链接”,执行如下命令
node scripts/search_wechat.js "关键词" -n 5 -r

参数说明

  • query:搜索关键词(必填)
  • -n, --num:返回数量(默认 10,最大 50)
  • -o, --output:输出 JSON 文件路径(可选)
  • -r, --resolve-url:尝试把中间链接解析成微信文章真实链接(会额外请求每条结果)

输出字段(文章对象)

文章标题、文章地址、文章概要、发布时间、来源公众号名称

常见问题处理

  • 结果为空:尝试更换关键词、更少的特殊字符、或稍后重试
  • 解析真实 URL 失败:这是常态(反爬限制);可提示用户用浏览器打开中间链接

注意事项

  • 本工具仅用于学习和研究目的,请勿用于商业用途或大规模爬取。
  • 使用本工具时请遵守相关网站的使用条款和规定。
  • 过度使用可能导致 IP 被封禁,请谨慎使用。

Comments

Loading comments...