lh-wechat-to-markdown
v1.2.1抓取并保存微信公众平台文章为干净的 Markdown 与 HTML 快照，支持登录态和图片本地化下载。
⭐ 0· 116·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (WeChat→Markdown) match the included scripts and README: the tool automates a Chromium browser, captures rendered HTML, converts to Markdown, and optionally downloads images. Optional env vars (WECHAT_*) relate to Chrome binary/profile and are appropriate for preserving login state.
Instruction Scope
SKILL.md instructs running the bundled Python script, using Playwright and optional --wait/--headed modes to let the user log in. It documents reusing browser Referer/Cookie for image downloads — which is necessary to fetch protected image URLs. The instructions do not direct reading or exfiltration of unrelated files or sending captured content to external endpoints.
Install Mechanism
No install spec is provided (instruction-only with code), and dependencies are standard Python packages (playwright, requests, bs4, etc.). The README documents installing Playwright and browsers. No downloads from suspicious URLs or arbitrary remote installers are present.
Credentials
No required credentials are declared. The optional env vars (WECHAT_CHROME_PATH, WECHAT_DATA_DIR, WECHAT_CHROME_PROFILE_DIR) are directly tied to controlling which Chrome binary/profile is used and are proportionate to the functionality. Note: pointing the script at an existing Chrome profile will expose that profile's cookies to the scraping/download step (intended to reuse login).
Persistence & Privilege
The skill is not always-enabled and uses normal autonomous invocation settings. It does not request persistent system-wide changes or modify other skills. It writes captured HTML/Markdown and images to local output directories as documented.
Assessment
This skill appears to do what it claims: it runs a local Python script that launches Playwright to render WeChat pages, saves an HTML snapshot, converts to Markdown, and can download images using the browser session's cookies. Before installing/running: 1) review and install the listed Python dependencies and Playwright browser; 2) run it in a controlled working directory because it will create files (wechat-articles/ and images/); 3) be careful when supplying WECHAT_CHROME_PROFILE_DIR — using a personal Chrome profile grants the script access to cookies stored in that profile (which is how it fetches protected images); prefer creating a dedicated Chrome profile for this task; 4) test first with public articles and avoid scraping content you are not authorized to save; 5) if you need higher assurance, review the full scripts/main.py file locally to confirm there are no network calls to unexpected endpoints (the provided files show only requests to original image URLs and no external telemetry).Like a lobster shell, security has layers — review code before you run it.
latestvk97caqd121jrt4wjba0rs7r9818348vy
License
MIT-0
Free to use, modify, and redistribute. No attribution required.