Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Wechat Blog Write Publish

v0.1.0

基于用户提供的参考资料,自动创作并排版微信公众号文章,保存为 Markdown 并发布至公众号草稿箱。

0· 145·0 current·0 all-time
byCaiJichang@caijichang212

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for caijichang212/wechat-blog-write-publish.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Wechat Blog Write Publish" (caijichang212/wechat-blog-write-publish) from ClawHub.
Skill page: https://clawhub.ai/caijichang212/wechat-blog-write-publish
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install wechat-blog-write-publish

ClawHub CLI

Package manager switcher

npx clawhub@latest install wechat-blog-write-publish
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description promise (generate and publish WeChat articles) aligns with the instructions: create Markdown from references and call wenyan-cli to publish. The tasks and referenced tooling are consistent with the stated purpose.
Instruction Scope
SKILL.md instructs the agent to fetch web pages, read local files/PDFs, generate Markdown/mermaid, and run wenyan-cli commands to publish. Those actions are within the skill's scope, but they require access to local files and network resources and will use WeChat credentials for publishing.
Install Mechanism
There is no formal install spec in the registry (instruction-only), but SKILL.md directs installing @wenyan-md/cli via npm (-g). Installing a global npm package is a normal but non-trivial action — verify the package source (npm/GitHub) before installation. No suspicious download URLs are present in the skill content.
Credentials
Publishing requires WeChat AppID and AppSecret and IP whitelist configuration; these sensitive credentials are necessary and proportional to the described publish action. The skill metadata does not declare these env vars/credentials (it is instruction-only), so the user must provide/configure them separately. Be cautious about how those credentials are stored and which tool/processes can access them.
Persistence & Privilege
Skill is not always-enabled and does not request persistent platform privileges. It does not attempt to modify other skills or system-wide configs in the provided instructions.
Assessment
This skill appears coherent for drafting and publishing WeChat articles, but before installing or running anything: 1) Verify the @wenyan-md/cli npm package and its source (GitHub repo, recent maintainers, license, and code) so you trust what the installer will run. 2) Be prepared to supply your WeChat AppID/AppSecret and add your machine's public IP to the official account IP whitelist — treat AppSecret like a password and do not share it. 3) When testing, use a non-critical/test official account or sandbox to confirm behavior (so accidental publishes or credential leaks don't affect a production account). 4) Avoid giving the tool access to sensitive local files you don't want uploaded. 5) If you need stronger assurance, review the wenyan-cli source code (or network traffic) to confirm it doesn't transmit credentials or data to unexpected endpoints and that it only calls the official WeChat API.

Like a lobster shell, security has layers — review code before you run it.

latestvk972fmqmevnyxjr8dsfhy3kfys83bpr6
145downloads
0stars
1versions
Updated 1mo ago
v0.1.0
MIT-0

name: "wechat-blog-write-publish"
description: "基于参考资料创作微信公众号文章并发布到草稿箱。Invoke when user provides reference materials and wants to create and publish a WeChat official account article."

WeChat Blog Write & Publish

本技能基于参考资料自动创作微信公众号文章,并发布到公众号草稿箱,实现从素材到成品的全流程自动化。

工作流程

1. 接收输入

  • 接收用户提供的参考资料(网页链接、文档、PDF 等)
  • 确认文章主题、核心内容方向和写作风格

2. 内容创作

严格遵循以下标准创作高质量文章:

内容要求

  • 准确性:严格依据参考资料,确保信息准确、来源可靠
  • 专业性:突出专业深度和实用价值,提供丰富的干货内容
  • 可读性:采用通俗易懂的表达,避免过度使用专业术语,必要时提供清晰解释
  • 逻辑性:结构清晰,层次分明,论述连贯

排版设计

  • 布局美观:整体排版大方得体,视觉舒适
  • 标题层级:合理使用 Markdown 标题(# ## ###),层次清晰
  • 段落分隔:段落长短适中,分隔清晰
  • 重点突出:使用 加粗、> 引用 等方式强调关键信息

视觉元素

  • 适度装饰:合理运用表情符号(如:😊、🎉、✨、📌)增强可读性
  • 风格平衡:保持专业性与趣味性的平衡,避免过度娱乐化

图表要求

  • 流程图/架构图:涉及流程、架构等内容时,使用 mermaid 语法创建可视化图表
  • 示例
graph TD
    A[开始] --> B[输入处理]
    B --> C[内容生成]
    C --> D[发布]

元信息格式

文章开头必须包含 Front Matter 元信息:

---
title: 文章标题
cover: asset/微信公众号头像.png
---

3. 输出格式

  • 将完成的文章保存为 Markdown (.md) 格式文件
  • 确保 Markdown 语法正确,可直接用于发布

4. 发布文章

使用 wenyan-cli 工具将 Markdown 文章发布到微信公众号草稿箱:

wenyan publish -f 文章名字.md

wenyan-cli 工具说明

安装方式:

npm install -g @wenyan-md/cli

前置配置:

  1. 获取公众号 AppID 和 AppSecret

    • 登录微信公众号后台
    • 进入"设置与开发" → "开发接口管理"
    • 复制 AppID 和 AppSecret
  2. 配置 IP 白名单 ⚠️

    • 在公众号后台"开发接口管理" → "基本配置" → "IP 白名单"
    • 添加本机公网 IP(可通过访问 ip.sb 查看)
    • 重要:未配置白名单会导致 40164 错误
  3. 配置凭证

    wenyan config --appid 你的 AppID --appsecret 你的 AppSecret
    

常用命令:

# 一键发布(最常用)
wenyan publish -f article.md

# 指定主题样式
wenyan publish -f article.md --theme blue

# 指定作者
wenyan publish -f article.md --author "作者名"

# 指定封面图
wenyan publish -f article.md --cover ./cover.jpg

# 开启评论
wenyan publish -f article.md --enable-comment

# 查看当前配置
wenyan config --list

# 查看可用主题
wenyan config --list-themes

内置主题: default, blue, green, red, yellow, brown, black, orange

Front Matter 支持:

文章开头可使用 Front Matter 定义元信息,命令行参数优先级高于 Front Matter:

---
title: 文章标题
author: 作者名
digest: 文章摘要
theme: blue
cover: ./cover.jpg
enableComment: true
---

分步执行流程:

如需更精细的控制,可分步执行:

# Step 1: Markdown 转 HTML(可指定主题)
wenyan md2html --from article.md --to article.html --theme blue

# Step 2: 修复 HTML 并上传图片到微信图床
wenyan fix article.html

# Step 3: 生成封面图
wenyan cover --title "文章标题" --author "作者名" --to cover.jpg

# Step 4: 发布到草稿箱
wenyan publish --article article.html --cover cover.jpg

输出目录结构:

执行后会在同级目录生成 .wxgzh/ 中间产物目录:

.wxgzh/
├── article.html          # 转换后的 HTML(已内联样式)
├── article.cover.jpg     # 自动生成的封面图
└── publish-result.json   # 发布结果(含草稿 ID)

常见问题:

  1. 40164 错误:IP 不在白名单,需在公众号后台添加本机公网 IP
  2. 封面图比例错误:微信封面图要求 2.35:1,工具会自动裁剪
  3. 图片上传失败:确保图片为本地路径,或已上传至微信图床

使用示例

示例 1:基于网页链接创作

用户输入:

请根据这个链接写一篇关于 LangChain 的公众号文章:
https://python.langchain.com/docs/get_started/introduction

技能执行:

  1. 抓取并分析网页内容
  2. 创作文章(包含 Front Matter 元信息、mermaid 图表、适当的表情符号)
  3. 保存为 langchain-intro.md
  4. 执行 wenyan publish -f langchain-intro.md 发布到草稿箱

示例 2:基于多个参考资料

用户输入:

请根据以下资料写一篇 AI 产品经理的文章:
- 文档:/path/to/product-methods.pdf
- 链接:https://example.com/ai-pm-guide

技能执行:

  1. 读取 PDF 文档和网页内容
  2. 整合信息,创作结构化的文章
  3. 保存为 ai-product-manager.md
  4. 执行 wenyan publish -f ai-product-manager.md 发布到草稿箱

注意事项

  1. 内容准确性:必须严格基于参考资料,不臆造信息,确保内容可靠
  2. 格式规范:确保 Markdown 语法正确,标题层级清晰,无语法错误
  3. 发布前检查:执行 publish 命令前确认 wenyan-cli 已正确配置,文件路径正确
  4. 封面图片:默认使用 asset/微信公众号头像.png,请确保该路径存在或使用自定义封面
  5. IP 白名单:发布前务必在公众号后台配置本机 IP 白名单,避免 40164 错误

Comments

Loading comments...