Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Wechat Quick Setup

v1.0.0

微信小程序快速启动模板。一键创建云函数、配置后端、生成代码。10分钟搭建完整微信小程序。

0· 138·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for yang1002378395-cmyk/wechat-quick-setup.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Wechat Quick Setup" (yang1002378395-cmyk/wechat-quick-setup) from ClawHub.
Skill page: https://clawhub.ai/yang1002378395-cmyk/wechat-quick-setup
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install wechat-quick-setup

ClawHub CLI

Package manager switcher

npx clawhub@latest install wechat-quick-setup
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the included scripts: init.js generates a project scaffold and generate-function.js / generate-page.js produce cloud functions and pages for a WeChat mini program. The templates reference wx-server-sdk and Tencent Cloud features which are coherent with the stated Tencent-cloud backend.
!
Instruction Scope
SKILL.md instructs running several node scripts from ~/.openclaw/skills/wechat-quick-setup and editing ~/.openclaw/skills/wechat-quick-setup/config.json. However, SKILL.md references setup-cloud.js (node .../setup-cloud.js) which is not present in the package. The documented config.json is not read by the included scripts (no code in the bundle reads that file), so the runtime instructions are partially inconsistent/broken. The templates include a payment cloudFunction that would require payment credentials when deployed, but the skill does not document or request those credentials.
Install Mechanism
This is an instruction-only skill with included Node.js generator scripts; there is no install spec, no remote downloads, and nothing writes to system-wide locations. The risk is typical for local scaffolding code: running the scripts will create files in the current working directory (expected behavior).
Credentials
The skill declares no required environment variables or credentials. That is consistent with local scaffolding. One caveat: some generated templates (payment / cloudPay) will require Tencent/WeChat payment credentials when deployed — those are not requested by the skill and are external to the scaffolding step. No evidence the skill attempts to read or exfiltrate host credentials.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It does not ask to persistently modify other skills or global agent settings. Its scripts create project files only under the target project directory.
What to consider before installing
This package appears to be a local scaffolding tool for WeChat mini programs, but there are some inconsistencies and missing pieces. Before running anything: 1) Inspect the included scripts (init.js, generate-function.js, generate-page.js) yourself — they simply write files but you should review the exact contents. 2) Note SKILL.md references setup-cloud.js which is NOT bundled; expect that some setup steps may be manual or missing. 3) Run the scripts in a disposable/test directory (not your home or a production repo). 4) The payment/cloudPay templates will require Tencent/WeChat payment credentials only when you deploy — do not paste secrets into files created by the scaffolder without understanding where they will be stored. 5) If you plan to pay or contact the Pro-channel, verify the vendor independently (contact channels listed in SKILL.md may be unverified). If you want a fully trustworthy package, request the missing setup script or a provenance/source URL from the publisher before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk978ev2p8x3dx7fszy836pe00s83h6wbminiprogramvk978ev2p8x3dx7fszy836pe00s83h6wbwechatvk978ev2p8x3dx7fszy836pe00s83h6wb
138downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

微信小程序快速启动

专为微信小程序开发者设计。10 分钟搭建完整小程序,包含云函数、用户系统、数据存储。

功能

  • 快速初始化 - 一键生成项目结构
  • ☁️ 云函数模板 - 登录/支付/存储常用云函数
  • 👤 用户系统 - 完整的登录/授权/用户信息管理
  • 💾 数据存储 - 云数据库 CRUD 操作封装
  • 🎨 UI 组件 - 常用页面模板

安装

npx clawhub@latest install wechat-quick-setup

使用方法

1. 初始化项目

node ~/.openclaw/skills/wechat-quick-setup/init.js --name "我的小程序"

生成项目结构:

my-miniprogram/
├── cloudfunctions/      # 云函数
│   ├── login/          # 登录
│   ├── getProducts/    # 获取商品
│   ├── createOrder/    # 创建订单
│   └── initDB/         # 初始化数据库
├── miniprogram/        # 小程序前端
│   ├── pages/          # 页面
│   ├── components/     # 组件
│   └── utils/          # 工具函数
├── project.config.json # 配置
└── README.md

2. 生成云函数

# 生成登录云函数
node ~/.openclaw/skills/wechat-quick-setup/generate-function.js login

# 生成 CRUD 云函数
node ~/.openclaw/skills/wechat-quick-setup/generate-function.js crud --collection products

3. 生成页面

# 生成商品列表页
node ~/.openclaw/skills/wechat-quick-setup/generate-page.js product-list

# 生成订单页
node ~/.openclaw/skills/wechat-quick-setup/generate-page.js order

4. 配置云开发

# 初始化云开发环境
node ~/.openclaw/skills/wechat-quick-setup/setup-cloud.js --env your-env-id

包含的模板

云函数模板

  • login - 用户登录
  • getOpenId - 获取用户 OpenID
  • getProducts - 获取商品列表
  • createOrder - 创建订单
  • initDB - 初始化数据库
  • uploadFile - 文件上传

页面模板

  • 首页 - 轮播图 + 商品列表
  • 商品详情 - 商品信息 + 购买按钮
  • 订单列表 - 订单状态展示
  • 用户中心 - 用户信息 + 设置

UI 组件

  • product-card - 商品卡片
  • order-item - 订单项
  • loading - 加载状态
  • empty - 空状态

完整示例

创建电商小程序

# 1. 初始化
node ~/.openclaw/skills/wechat-quick-setup/init.js --name "商城"

# 2. 生成云函数
node ~/.openclaw/skills/wechat-quick-setup/generate-function.js login
node ~/.openclaw/skills/wechat-quick-setup/generate-function.js getProducts
node ~/.openclaw/skills/wechat-quick-setup/generate-function.js createOrder

# 3. 生成页面
node ~/.openclaw/skills/wechat-quick-setup/generate-page.js home
node ~/.openclaw/skills/wechat-quick-setup/generate-page.js product-detail
node ~/.openclaw/skills/wechat-quick-setup/generate-page.js order

# 4. 用微信开发者工具打开
# 导入项目 → 选择目录 → 填入 AppID

技术栈

  • 前端: 微信小程序原生框架
  • 后端: 腾讯云开发(云函数 + 云数据库 + 云存储)
  • 语言: JavaScript/TypeScript

常见问题

Q: 需要服务器吗?

A: 不需要。使用腾讯云开发,免费额度足够小型应用使用。

Q: 如何获取 AppID?

A: 访问 https://mp.weixin.qq.com → 开发 → 开发设置 → AppID

Q: 云开发免费吗?

A: 有免费额度:

  • 云函数:10 万次调用/月
  • 数据库:2GB 存储
  • 云存储:5GB 存储

配置

编辑 ~/.openclaw/skills/wechat-quick-setup/config.json

{
  "appid": "your-appid",
  "envId": "your-env-id",
  "projectName": "我的小程序"
}

💬 Pro 版本(¥299)

免费版(当前)

  • 基础云函数模板
  • 基础页面模板
  • 项目初始化

Pro 版(¥299)

  • ✅ 20+ 高级云函数(支付/订阅/消息推送)
  • ✅ 10+ 完整页面模板
  • ✅ 数据库设计模板
  • ✅ 后台管理系统
  • ✅ 1对1 远程配置支持
  • ✅ 1年更新支持

联系方式

  • QQ: 1002378395(中国用户)
  • Telegram: 待注册(海外用户)

添加 QQ 1002378395,发送"微信小程序"获取 Pro 版信息


License

MIT(免费版) Pro 版:付费后可用

Comments

Loading comments...