微信公众号自定义主题应用工具

AI-ready skill to test, register, and publish Markdown articles to WeChat Official Accounts using a local custom CSS theme via Wenyan CLI.

Security Scan

The skill's runtime instructions and need for WeChat credentials align with its purpose, but the registry metadata omits the required sensitive environment variables and other small inconsistencies that could lead to unexpected credential use.

Purpose & Capability

The SKILL.md describes exactly the expected capabilities (render locally, publish to WeChat drafts, register themes) and these require WECHAT_APP_ID / WECHAT_APP_SECRET and a wenyan-cli installation — so functionality itself is coherent. However, the registry metadata lists no required environment variables or primary credential, which is inconsistent with the skill's stated runtime requirements and could hide sensitive credential needs from users.

Instruction Scope

Instructions are narrowly scoped to running the wenyan-cli commands (wenyan render / publish / theme --add) against local Markdown and CSS files and checking for expected HTML output. The steps do not instruct the agent to read unrelated files or exfiltrate data to third-party endpoints outside the described publishing flow. They do, however, mandate using WeChat credentials to call the WeChat service via the CLI.

Install Mechanism

This is an instruction-only skill with no install spec or code files, which lowers disk/write risk. The SKILL.md requires the external tool wenyan-cli (suggesting pnpm install), but the skill does not itself provide or fetch that binary—users should verify the cli's provenance before installing it.

Credentials

The SKILL.md requires sensitive environment variables (WECHAT_APP_ID and WECHAT_APP_SECRET), which are proportionate to the publish capability. The problem is the registry metadata did not declare these required credentials or a primaryEnv, meaning users might not be warned by the platform about sensitive data the skill needs. That mismatch increases the risk of credentials being supplied without clear consent/context.

Persistence & Privilege

always is false and autonomous invocation is default (not flagged alone). The skill's 'theme --add' action will persist a theme into the local wenyan-cli theme library (a local config change), which is reasonable for its purpose but should be noted as modifying local CLI state.

What to consider before installing

This skill appears to do what it says (render, publish to WeChat drafts, and register local themes) but the SKILL.md requires WECHAT_APP_ID and WECHAT_APP_SECRET while the registry metadata does not declare them — that mismatch is the main concern. Before installing or using it: 1) Confirm you trust the wenyan-cli package source (review its project/homepage and code if possible). 2) Only provide WeChat credentials in a secure way and understand the scope (publishing drafts). 3) Prefer to run the render step locally yourself first; avoid allowing the agent to autonomously publish without your explicit approval. 4) Ask the publisher to update registry metadata to declare required env vars so the platform can surface the credential requirement to you. If you need higher assurance, request an install spec or source link to inspect the wenyan-cli behavior that performs the network calls.

微信公众号自定义主题应用工具 (WeChat Custom Theme Applier)

这是一个专门为 AI Agent 设计的技能，用于将本地生成的自定义 CSS 主题应用到 Markdown 文章中。它支持通过 wenyan-cli 进行本地预览、主题注册以及一键推送到微信公众号草稿箱。

前置要求

• 环境配置：必须设置 WECHAT_APP_ID 和 WECHAT_APP_SECRET 环境变量。
• 依赖工具：已安装 wenyan-cli (pnpm add -g @wenyan-md/cli)。
• 必要文件：本地已存在 Markdown 文件 (.md) 和 CSS 主题文件 (.css)。

核心能力

• 本地测试渲染：在发布前验证 CSS 样式的正确性。
• 一键发布草稿：直接应用本地 CSS 将文章推送到公众号草稿箱。
• 主题持久化：将优秀的自定义主题注册到 wenyan-cli 主题库中，方便后续调用。

AI Agent 指令指南：工作流 SOP

当用户要求“应用生成的 xxx.css 并发布 yyy.md”时，Agent 必须 遵循以下标准操作流程：

Step 1: 测试渲染 (Render Test) [强制]

在正式发布前，必须先进行模拟渲染，以确保 CSS 语法正确且文件路径有效。

• 命令：

  wenyan render -f <markdown_file_path> -c <css_file_path>
  

• 验证：如果输出包含 <div id="wenyan"> 的 HTML 字符串且无报错，则说明正常。

Step 2: 正式发布 (Publish to Draft)

测试通过后，使用该 CSS 文件将文章推送到微信公众号草稿箱。

• 命令：

  wenyan publish -f <markdown_file_path> -c <css_file_path>
  

• 可选参数：
  • --no-mac-style：禁用代码块 Mac 风格窗口。
  • -h <highlight_theme>：指定代码高亮主题（如 atom-one-dark）。

Step 3: 注册主题 (Register Theme) [按需]

如果用户表示需要长期使用该主题，应将其注册到本地主题库。

• 命令：

  wenyan theme --add --name <theme_name> --path <css_file_path>
  

• 后续调用：注册后可直接使用 -t <theme_name> 参数发布。

故障排除 (Agent 专用)

• 文件不存在：检查 ENOENT 报错，确认 Markdown 或 CSS 文件路径是否正确。
• 样式未生效：检查 CSS 选择器是否缺少 #wenyan 前缀。
• 凭证错误：如果微信 API 返回 invalid credential，提示用户检查 WECHAT_APP_ID 和 WECHAT_APP_SECRET 环境变量。