Direct WeChat Article Reader
v0.1.2直接读取微信公众号文章正文的可执行 skill。适用于用户提供 mp.weixin.qq.com 链接,并明确要你读正文、摘录内容、提取标题、做总结的场景。与很多只给方法或提示词的同类 skill 不同,这个 skill 自带 setup、run 和 Playwright 提取脚本,已经在真实文章上验证能读出标题...
⭐ 0· 49·0 current·0 all-time
by文武贝@wuyunting555
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name and description match the included code and scripts: it uses Node + Playwright to load a WeChat article and extract title/body text. Required tooling (Node, Playwright) is proportional to the stated purpose and no unrelated credentials, binaries, or services are requested.
Instruction Scope
SKILL.md and the scripts stick to the stated task: install dependencies, install Playwright browsers, launch Chromium, navigate to the mp.weixin.qq.com URL, and return title/bodyText. The README and SKILL.md use example absolute paths but those are only documentation examples and not required by the code. The runtime does not read unrelated system files or environment variables.
Install Mechanism
There is no separate platform install spec; the skill relies on npm install and npx playwright install chromium. This is expected for a Playwright-based tool, but npm install runs package lifecycle scripts and playwright will download browser binaries from its upstream, so users should be aware that network downloads and package install scripts will execute.
Credentials
The skill does not declare or require any credentials or environment variables. It sets PLAYWRIGHT_BROWSERS_PATH to a browser cache under the user's home directory (~/ .cache/ms-playwright), which is reasonable for storing browser binaries but does write to the user's home directory.
Persistence & Privilege
The skill does not request elevated platform privileges, does not set always:true, and does not modify other skills' configs. It installs node modules into its folder and downloads browser binaries to the user's cache path—expected behavior for Playwright but not globally persistent beyond those files.
Assessment
This skill is coherent with its purpose, but before installing consider: (1) npm install will run package lifecycle scripts and will download Playwright browser binaries—run it only from a machine you trust or inside an isolated environment (container/VM) if you are cautious; (2) confirm you have a compatible Node version (Playwright here requires Node >=18); (3) the script opens a real browser (headless:false) and will access the network to fetch the article—do not use it on pages you do not trust; (4) review scripts/extract.js and setup.sh yourself if you want to verify there is no additional behavior; and (5) browser binaries will be stored in ~/.cache/ms-playwright by default and npm packages will be installed into the skill folder.Like a lobster shell, security has layers — review code before you run it.
latestvk972tag7ywd1f042fr50m1p25h8472fv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
