ClawHub

Wechat MP Article Stats Comments Suite - 微信公众号管理套件

v1.0.11

公众号运营：发文到草稿、样式与封面、评论与用户管理、数据统计等。当用户说：把这篇 Markdown 发到公众号草稿、看下昨天阅读量统计，或类似公众号后台操作时，使用本技能。

⭐ 6· 273·3 current·3 all-time
by极速数据@jisuapi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the code and SKILL.md: scripts call WeChat API endpoints for drafts, publish, comments, users, and stats. Requested env vars (AppID/AppSecret, optional multi-account JSON and cookie) are appropriate and expected for this purpose.
✓
Instruction Scope
SKILL.md and individual scripts define explicit CLI commands and parameters; runtime instructions limit local file reads to current working directory and subdirectories and only fetch external resources when URLs are provided. There are no instructions asking the agent to read unrelated system files or exfiltrate data beyond WeChat/API requests and optionally fetching user-specified URLs.
✓
Install Mechanism
No installation spec is included (instruction-only), and the code is pure Python relying on common libraries (requests, markdown, pillow). Dependencies are declared in SKILL.md and no remote executable downloads or archive extraction are used.
✓
Credentials
Required environment variables (WECHAT_MP_APP_ID, WECHAT_MP_APP_SECRET) are proportional to the stated functionality. Optional variables (WECHAT_MP_ACCOUNTS, WECHAT_MP_COOKIE, WECHAT_MP_DEFAULT_AUTHOR) are documented and justified. No unrelated secrets or broad system credentials are requested.
✓
Persistence & Privilege
Skill does not request 'always: true' or other elevated persistence. It does not modify other skills or system-wide configs. Normal autonomous invocation is allowed but not excessive given the functionality.
Assessment
This package appears coherent for managing WeChat public accounts, but take standard precautions: only set AppID/AppSecret (and optional WECHAT_MP_ACCOUNTS) in a trusted/isolated environment; avoid placing WECHAT_MP_APP_SECRET or WECHAT_MP_COOKIE in logs or public repos; review the scripts if you want to confirm behavior (they use only api.weixin.qq.com and fetch user-supplied URLs); install Python dependencies in a virtualenv; and if you must provide WECHAT_MP_COOKIE (sensitive), store it securely and only when needed.

Like a lobster shell, security has layers — review code before you run it.

latestvk97e9en5j4gckm7rdg4smaqqys84499k

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📣 Clawdis
Binspython3
EnvWECHAT_MP_APP_ID, WECHAT_MP_APP_SECRET

Comments