WeChat Official Account Article Auto-Publisher

PassAudited by VirusTotal on May 2, 2026.

Overview

Type: OpenClaw Skill Name: wechat-mp-article-publisher Version: 1.0.0 The skill is a legitimate browser automation tool for publishing articles to the WeChat Official Account platform. It follows a transparent workflow in SKILL.md, explicitly requiring manual user intervention for sensitive steps such as login and final publishing confirmation via QR code scans, and does not exhibit any signs of data exfiltration, credential theft, or malicious prompt injection.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could mark non-original or uncertain content as original, potentially causing platform penalties, copyright disputes, or reputational harm to the Official Account.

Why it was flagged

The workflow unconditionally instructs the agent to claim and confirm originality for the article, without requiring the user to verify that the content is original.

Skill content
### 4. Claim Originality ... browser act ref=<original-button-ref> kind=click ... browser act ref=<confirm-button-ref> kind=click
Recommendation

Require explicit user confirmation before claiming originality, and skip this step unless the user states that the article is original and they want the originality setting enabled.

What this means

Once logged in, the browser session can perform privileged account actions such as creating, editing, and publishing content.

Why it was flagged

The skill relies on an authenticated admin WeChat session to access the Official Account backend.

Skill content
prompt the user to scan the QR code with the admin WeChat account
Recommendation

Use this only in the intended Official Account, watch the browser session during use, and log out or close the session when finished.

NoteHigh Confidence
ASI08: Cascading Failures
What this means

A mistake in generated text, images, links, or publishing options could be sent to followers or appear publicly and may be hard to undo.

Why it was flagged

The skill supports bulk/public publishing and acknowledges that some published or mass-notified content may be difficult to correct afterward.

Skill content
User needs to publish content in bulk to the Official Account ... After mass notification, only errors within 20 characters can be modified; major changes are not possible.
Recommendation

Preview every article, require per-article approval for bulk runs, and avoid enabling mass notification unless the user explicitly requests it.