wechat mp push 微信公众号图文生成与推送技能

• Analyzed: May 10, 2026, 2:16 AM
• Findings: 1
• Version: 3.0.6
• Hash: 1394edb8ec50d44af9dec1ad3670ae1e05eb0ee64b22f81f6048f5815dc6ecca
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed to facilitate the creation and pushing of WeChat Official Account articles via a third-party proxy service (api.pcloud.ac.cn). The core logic in `push-to-wechat-mp.js` is transparent, using standard Node.js libraries to read local HTML files and send them to the documented API endpoint. It includes security best practices such as using `path.basename()` to prevent directory traversal attacks when handling filenames. The markdown files (`SKILL.md`, `Humanizer-zh.md`, `design.md`) provide stylistic and structural instructions to the AI agent that are consistent with the stated purpose and do not contain malicious prompt injections or instructions to exfiltrate sensitive data.