Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Wechat Mp To Notion

v0.1.0

Fetch WeChat public account (微信公众号) articles from mp.weixin.qq.com links and save them into Notion as structured pages. Use when the user wants to archive a...

0· 99·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for opoojkk/wechat-mp-to-notion.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Wechat Mp To Notion" (opoojkk/wechat-mp-to-notion) from ClawHub.
Skill page: https://clawhub.ai/opoojkk/wechat-mp-to-notion
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install wechat-mp-to-notion

ClawHub CLI

Package manager switcher

npx clawhub@latest install wechat-mp-to-notion
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The script and SKILL.md match the stated purpose: they fetch mp.weixin.qq.com article HTML, parse content and images, and create Notion pages via api.notion.com. However the registry metadata lists no required environment variables or primary credential while the SKILL.md and the code clearly require a Notion API token. This mismatch is an incoherence in the metadata (not necessarily malicious, but important).
Instruction Scope
Runtime instructions are narrowly scoped: run the included Python script with a WeChat URL and a Notion parent ID. The script only fetches the provided WeChat URL and calls Notion's API (api.notion.com). It does not attempt to read arbitrary local files or contact other external endpoints beyond the article host and Notion.
Install Mechanism
There is no install spec (instruction-only + included script). No external installers, unusual download URLs, or archive extraction are present. The script will run from the skill workspace; this is low-risk from an install-mechanism perspective.
!
Credentials
The registry declares no required environment variables, but SKILL.md and the code require a Notion API token (NOTION_API_KEY or NOTION_TOKEN). That secret is necessary for the stated functionality, so the absence in registry metadata is a governance/information omission. The script requests only that Notion credential (no unrelated secrets), which is proportional — but the metadata inconsistency should be fixed so users know which secret will be used and stored by the agent.
Persistence & Privilege
always is false and the skill does not request permanent system presence or modify other skills. Its actions are confined to network calls that create pages in the user's Notion workspace (using the provided token).
What to consider before installing
This skill appears to do what it says: download a public WeChat article and create a Notion page. Before installing: (1) be aware you must provide a Notion token (NOTION_API_KEY or NOTION_TOKEN). The registry metadata currently omits this — ask the publisher to declare the required env var and primary credential. (2) Only grant the token the minimal scope needed for creating pages and ensure the target page/database is shared with the integration. (3) Inspect the included Python script yourself (or have someone you trust do so) to confirm it matches your expectations; it performs network requests to mp.weixin.qq.com and api.notion.com and does not otherwise exfiltrate data. (4) If you plan to run this in a shared/production environment, prefer a token scoped to a dedicated Notion integration and not a broad user token.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f0hp5198d6nn1tc55xyy1ts83gq4h
99downloads
0stars
1versions
Updated 1mo ago
v0.1.0
MIT-0

WeChat MP article → Notion

Save a public WeChat article into Notion.

What this skill does

  • Fetch article HTML from https://mp.weixin.qq.com/s/...
  • Extract title / author / publish date
  • Parse article body into readable text blocks
  • Preserve image positions with external image URLs where possible
  • Create a new Notion page under a target page or in a target database

Use

Run the script:

python3 /root/.openclaw/workspace/skills/wechat-mp-to-notion/scripts/save_wechat_mp_to_notion.py <wechat_url> <notion_parent_id> [--parent-type page|database]

Examples:

python3 /root/.openclaw/workspace/skills/wechat-mp-to-notion/scripts/save_wechat_mp_to_notion.py "https://mp.weixin.qq.com/s/xxxx" 32c51492e44780c48647f03febbc6c84
python3 /root/.openclaw/workspace/skills/wechat-mp-to-notion/scripts/save_wechat_mp_to_notion.py "https://mp.weixin.qq.com/s/xxxx" c5f3656c2e8741e88f53a00faf66355e --parent-type database

Notes

  • Require NOTION_API_KEY
  • The target Notion page/database must be shared with the openclaw integration
  • Prefer page parent when archiving long-form articles
  • Prefer database parent when the user explicitly wants one row per article
  • If the article is very long, the script chunks content into multiple append requests

Comments

Loading comments...