Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

微信公众号文章处理器

v1.0.0

微信公众号文章处理工具 - 自动抓取、结构化整理、保存到飞书文档。触发词:处理公众号文章、微信文章转飞书、公众号链接

0· 88·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for hoyaryyj/wechat-article-processor.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "微信公众号文章处理器" (hoyaryyj/wechat-article-processor) from ClawHub.
Skill page: https://clawhub.ai/hoyaryyj/wechat-article-processor
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install wechat-article-processor

ClawHub CLI

Package manager switcher

npx clawhub@latest install wechat-article-processor
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name and description match the code and SKILL.md: both focus on fetching a WeChat article, structuring it and creating a Feishu doc. However, the included Python script only parses browser output and does not perform the Feishu document creation mentioned in the SKILL.md, so implementation is incomplete relative to claimed capability.
Instruction Scope
SKILL.md explicitly instructs the agent to use a browser tool to fetch content and a feishu_create_doc action to save the processed article. These instructions stay within the stated purpose (scrape → parse → save). It also notes login/captcha limitations and instructs to ask the user to copy content if captcha encountered, which is appropriate. No instructions request unrelated files, system credentials, or exfiltration to unknown endpoints.
Install Mechanism
This is an instruction-only skill with one small helper script and no install spec. Nothing is downloaded or written to disk by an installer — lowest-risk install footprint.
!
Credentials
SKILL.md states '需要飞书授权' (Feishu authorization) and instructs use of feishu_create_doc, but the skill metadata lists no required environment variables or primary credential. The code file also contains no Feishu integration. The absence of declared credential requirements is an inconsistency: saving to Feishu will require authentication (token/credential), but the skill does not declare how that credential is provided or scoped.
Persistence & Privilege
The skill is not always-enabled and requests no special persistent privileges. It does not modify other skills or system-wide settings and does not require permanent presence.
What to consider before installing
This skill appears to do what it says (fetch, parse, format WeChat articles) but there are two practical mismatches you should resolve before installing: (1) the SKILL.md says it will create a Feishu document and requires Feishu authorization, yet no Feishu credential is declared in the metadata and the included Python script does not perform any Feishu API calls; (2) the integration depends on the agent's browser tool being able to access the article (login/captcha may block full fetch). Before installing, ask the author to clarify how Feishu authentication is expected to be provided (which environment variable or platform connector, and required scopes), and whether the skill will handle uploads automatically or requires platform-level feishu_create_doc capability. Test with non-sensitive public articles first, and do not provide Feishu tokens until you confirm exactly how they are used and stored.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

📱 Clawdis
articlevk97aya1d2t4adjwjf724nv2vyn83zqrpfeishuvk97aya1d2t4adjwjf724nv2vyn83zqrplatestvk97aya1d2t4adjwjf724nv2vyn83zqrpwechatvk97aya1d2t4adjwjf724nv2vyn83zqrp
88downloads
0stars
1versions
Updated 4w ago
v1.0.0
MIT-0

微信公众号文章处理工具

当用户发送微信公众号文章链接时,自动完成:

  1. 用浏览器抓取文章全文
  2. 结构化整理(标题、作者、时间、正文、来源(网址))
  3. 创建飞书云文档

工作流程

  1. 抓取:browser 工具打开链接获取完整内容
  2. 提取:解析标题、作者、发布时间、正文、来源(网址)
  3. 整理:格式化为 Markdown,必须进行结构化处理
    • 添加文章元信息(作者、发布时间、来源)
    • 提取关键要点/核心观点作为摘要
    • 核心内容或者经典言论要引用原文
    • 使用多级标题划分文章结构
    • 重要段落可适当精简或提取关键句
  4. 保存:feishu_create_doc 创建飞书文档

使用方式

用户发送公众号链接时自动触发:

用户:https://mp.weixin.qq.com/s/xxx
→ 自动抓取 → 整理 → 存飞书 → 返回链接

注意事项

  • 微信文章可能需要登录才能访问完整内容
  • 如遇验证码,告知用户手动复制
  • 需要飞书授权

Comments

Loading comments...