1-Click WOA

v1.0.0

一键发布微信公众号草稿箱文章。用户提供文章内容(Markdown),自动完成 token 获取 → 图片上传 → 草稿构建 → 发布全流程。支持微信草稿箱 API,自动处理中文编码问题,发布失败时提供 HTML fallback 方案。触发词:「发布公众号」「发草稿」「发微信公众号」。

0· 97·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for yanbo00701/1-click-woa.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "1-Click WOA" (yanbo00701/1-click-woa) from ClawHub.
Skill page: https://clawhub.ai/yanbo00701/1-click-woa
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install 1-click-woa

ClawHub CLI

Package manager switcher

npx clawhub@latest install 1-click-woa
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (WeChat draft publishing) match the included scripts and docs. The code reads a local credentials.json (app_id/app_secret) and image files and calls api.weixin.qq.com endpoints — all expected for this purpose. No unrelated credentials, services, or binaries are requested.
Instruction Scope
SKILL.md and scripts confine actions to reading ~/.openclaw/agents/gzh-assistant/wechat/credentials.json, reading images from the configured image_dir, calling WeChat API endpoints, and writing an HTML fallback to the agent directory. There are no instructions to read arbitrary system files, other skills' config, or to send data to unknown third-party endpoints.
Install Mechanism
This is an instruction-only skill with bundled Python scripts and no install spec (lowest risk). Minor inconsistency: scripts use the Python 'requests' library but the skill metadata does not declare dependencies; SETUP.md mentions Python 3.8+ but not explicit pip deps. This is a usability/incoherence issue (runtime failure) rather than a direct security concern.
Credentials
No environment variables or unrelated credentials are requested. The required secrets (AppID/AppSecret) are proportional and necessary for WeChat API access and are stored in a local credentials.json per docs. The script only accesses files within the agent directory and user-specified image_dir.
Persistence & Privilege
Skill does not request always:true and does not modify other skills or system-wide settings. It writes a fallback HTML file into its own agent directory, which is appropriate and limited in scope.
Assessment
This skill appears coherent with its purpose, but before installing: 1) only provide AppID/AppSecret if you trust the skill — these are real credentials for your WeChat account; keep them secret and rotate if exposed; 2) inspect the bundled publish.py yourself (it is small and readable) and confirm network calls are only to api.weixin.qq.com; 3) ensure your Python environment has the 'requests' package (the script assumes it) or the script will fail; 4) run scripts/test_config.py first to verify paths and files; 5) consider testing with a non-production WeChat account to confirm behavior; and 6) do not commit your credentials.json to any repository. If you need higher assurance, ask the author for a provenance/homepage or run the code in an isolated environment.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ep9f0gj5tevandqbfvq83ks8417g8
97downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

1-Click WOA — 微信公众号草稿箱一键发布

快速开始

  1. 配置凭证(首次使用或更换账号时)
  2. 提供文章 → 直接粘贴 Markdown 或文本内容
  3. 确认发布 → Skill 自动执行全流程

工作流程

用户提供文章内容
    ↓
检查配置文件(credentials.json)
    ↓ 缺失 → 中断,提示用户配置
获取 access_token
    ↓ 失败 → 报错退出
上传封面图 + 内容图片(最多5张)
    ↓ 失败 → 报错退出
构建草稿 JSON(UTF-8 + charset=utf-8)
    ↓
提交草稿箱
    ↓ 成功 → 报告 media_id 和预览链接
    ↓ 失败(中文乱码)→ 自动切换 HTML fallback
        → 生成可下载 HTML 文件
        → 提示用户手动复制发布

配置文件

路径: ~/.openclaw/agents/gzh-assistant/wechat/credentials.json

模板:

{
  "app_id": "你的AppID",
  "app_secret": "你的AppSecret",
  "image_dir": "~/wechat_images"
}

获取方式:

  • AppID/AppSecret:微信公众平台 → 设置与开发 → 基本配置
  • image_dir:封面图和内容图片存放目录(绝对路径)

图片要求

类型数量格式尺寸建议
封面图1张PNG/JPG900×383 px
内容图最多4张PNG/JPG宽度≤1080px

图片必须预先放入 image_dir 目录,命名规则:

  • cover.png / cover.jpg — 封面图
  • layer1.png / layer1.jpg — 内容图1
  • layer2.png / layer2.jpg — 内容图2
  • layer3.png / layer3.jpg — 内容图3
  • layer4.png / layer4.jpg — 内容图4

文章格式要求

  • 标题:不超过34字节(约17个中文)
  • 摘要:不超过61字节(约30个中文)
  • 正文:支持 HTML 格式(<p>/<img>/<strong> 等)
  • 图片在正文中使用 <img src="(media_id)" /> 引用

已知限制

  1. 中文编码 bug:微信草稿 API 对中文 content 有 \uXXXX 转义问题

    • 修复方案:UTF-8 编码 + charset=utf-8 header
    • Fallback:发布失败时自动生成 HTML 文件供手动发布
  2. access_token 有效期:2小时,过期需重新获取

  3. 永久素材数量:每个账号最多10000个


参考文档

Comments

Loading comments...