微信公众号自动发布增强版

一键发布 Markdown/HTML 文章到微信公众号草稿箱，支持自动配图、美化排版、UTF-8 编码

Security Scan

The skill's code and runtime instructions match its stated purpose (publishing to WeChat) but the package metadata omits the fact that it requires WeChat credentials (APPID/APPSECRET), an inconsistency users should be aware of before installing.

Purpose & Capability

Name, description, SKILL.md and the included wechat_publish.py all consistently implement a WeChat article publisher (upload image, convert Markdown to HTML, create draft via api.weixin.qq.com). The requested capabilities (WeChat APPID/APPSECRET, reading article/cover files) are proportionate to the stated purpose.

Instruction Scope

SKILL.md instructs the agent/user to set WECHAT_APPID/WECHAT_APPSECRET and to provide article and cover file paths. Instructions stay within publishing scope and do not request unrelated system data. Minor note: SKILL.md and README suggest copying a .env file and adjusting IP whitelist, which is expected for WeChat API usage but grants the skill network access to the WeChat endpoints.

Install Mechanism

No install spec — instruction-only with a single included Python script. No downloads from external or untrusted URLs and no archive extraction. Risk from installation is low; execution will run the included script using local Python and the requests library (standard behavior).

Credentials

SKILL.md requires WECHAT_APPID and WECHAT_APPSECRET, and the code uses appid/appsecret to obtain access_token — this is appropriate for the purpose. However, the registry metadata lists no required environment variables or primary credential, which is an inconsistency (the skill asks for sensitive credentials but the package metadata does not declare them). Users should treat this omission as a packaging mistake at minimum and verify before providing credentials.

Persistence & Privilege

The skill does not request always:true and does not modify other skills or system-wide settings. It simply runs as a script and communicates with api.weixin.qq.com. No elevated persistence or privileged system-wide access requested.

What to consider before installing

This skill appears to implement exactly what it claims — a WeChat article publisher — and the included Python file shows network calls only to the official WeChat API (api.weixin.qq.com). However, the package metadata did not declare the required WECHAT_APPID/WECHAT_APPSECRET even though SKILL.md and the script ask for them. Before installing or providing credentials: - Inspect the included wechat_publish.py (already provided) to confirm there are no unexpected remote endpoints or obfuscated code (the file calls only api.weixin.qq.com). - Only provide your APPID/APPSECRET to skills you trust; consider using a limited or test WeChat account first. - Use the script's --dry-run (or run locally) and avoid putting credentials into untrusted shared environments. - Confirm network calls go to api.weixin.qq.com (monitor outgoing connections if possible). I rated this 'suspicious' because of the metadata omission regarding required credentials; that omission could be an innocent packaging error but is worth double-checking. If you find other required env vars, remote installers, or non-WeChat endpoints in the code, that would raise the severity.

微信公众号自动发布技能

一键发布文章到微信公众号草稿箱，支持 Markdown/HTML 格式，自动美化排版。

功能特性

✅ 核心功能

• 一键发布到草稿箱
• Markdown/HTML 自动转换
• 自动上传封面图
• 美化排版样式
• 中文编码修复（UTF-8）

✅ 技术优势

• 解决 Unicode 转义问题
• 支持长文章（50000 字以内）
• 自动图片压缩

配置

1. 获取微信公众号配置

登录微信公众平台：https://mp.weixin.qq.com

路径: 设置与开发 → 基本配置

需要:

• APPID (公众号 ID)
• APPSECRET (应用密钥)

2. 设置环境变量

WECHAT_APPID=你的 APPID
WECHAT_APPSECRET=你的 APPSECRET

使用方法

方式 1: 命令行发布

python scripts/wechat_publish.py \
  --article "article.md" \
  --cover "cover.jpg" \
  --title "文章标题"

方式 2: Python 代码

from wechat_publish import WeChatPublisher

publisher = WeChatPublisher(
    appid="你的 APPID",
    appsecret="你的 APPSECRET"
)

result = publisher.publish(
    article_path="article.md",
    cover_path="cover.jpg",
    title="文章标题"
)

脚本说明

wechat_publish.py

主发布脚本，支持多种选项：

# 基本用法
python wechat_publish.py --article article.md --cover cover.jpg --title "标题"

# 指定摘要
python wechat_publish.py \
  --article article.md \
  --cover cover.jpg \
  --title "标题" \
  --digest "摘要"

常见问题

Q1: Token 获取失败？

原因: IP 白名单未配置

解决:

1. 登录 mp.weixin.qq.com
2. 设置与开发 → 基本配置 → IP 白名单
3. 添加你的公网 IP

Q2: 中文乱码？

解决: 脚本已自动处理 UTF-8 编码

Q3: 图片上传失败？

原因: 图片格式不支持或太大

解决:

• 格式：JPG/PNG
• 大小：<10MB
• 尺寸：建议 1200x630px

最佳实践

封面图选择

• 尺寸: 1200x630px (2.35:1)
• 格式: JPG/PNG
• 大小: <10MB

发布时间

最佳时间:

• 工作日：20:00-22:00
• 周末：10:00-12:00

更新日志

v3.1.2 (2026-03-13)

• ✅ 精简代码，减少 token 使用
• ✅ 优化文件结构
• ✅ 清理私人信息

v3.1.1 (2026-03-13)

• ✅ 手机阅读优化
• ✅ 代码块优化
• ✅ 表格样式优化

v3.1.0 (2026-03-13)

• ✅ 官网配图自动下载
• ✅ 智能过滤图片

---

版本：v3.1.2
最后更新：2026-03-13
作者：Robotqu