wechat-article-explainer — 技能工具
v1.0.1微信公众号文章通俗内容解释技能。当用户需要总结或解释微信公众号链接或url时使用这个技能。技能包含：根据用户提供的链接或URL，读取链接内容，用通俗的语言解释内容。
0· 286·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceThe skill's code and instructions match its description: it fetches and summarizes WeChat (mp.weixin.qq.com) articles using requests or Playwright and does not request unrelated credentials or install arbitrary third-party binaries.
评估建议
This skill appears to do exactly what it claims, but take a few precautions before using it in production: 1) Inspect scripts/wechat_reader.py yourself (it's included) and confirm you are comfortable running it. 2) Install dependencies from official sources (pip and the official Playwright install) and be aware Playwright will download a browser binary. 3) Prefer running the script in a sandboxed environment (or without browser mode: --no-browser) if you are worried about untrusted page JavaScri...详细分析 ▾
✓ 用途与能力
The name/description, SKILL.md, requirements.txt, and scripts/wechat_reader.py are consistent: the skill fetches WeChat article pages and extracts title, author, date, and content. Required dependencies (requests and optionally playwright) align with the stated approach (direct HTTP or browser emulation). No unrelated environment variables or credentials are requested.
ℹ 指令范围
SKILL.md explicitly instructs running scripts/wechat_reader.py on mp.weixin.qq.com article URLs, which the code supports. However, the script does not strictly enforce the domain — if given an arbitrary URL it will attempt to fetch it. That means an attacker or a careless user could cause the agent to request arbitrary network endpoints (SSRF/probing). Also, using Playwright runs a full browser and executes page JavaScript from remote pages (normal for scraping, but increases the attack surface). SKILL.md does warn about anti-leeching and suggests using browser mode or asking the user to copy content when fetch fails.
✓ 安装机制
There is no automated install spec; dependencies are listed in requirements.txt. Installing Playwright requires an additional browser install step (playwright install chromium). All installs are from standard Python packages (pip). No downloads from obscure URLs or arbitrary extract operations are present in the package.
✓ 凭证需求
The skill requests no environment variables, no credentials, and no config paths. The level of access requested (networking to fetch public web pages) is proportional to the stated purpose.
✓ 持久化与权限
always is false and the skill does not request persistent platform privileges. It contains a runnable script but does not attempt to modify other skills or global agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/11
- Updated skill metadata format for clarity and standardization. - Moved wechat_reader.py into the scripts/ directory. - Added .clawhub/origin.json and _meta.json files for better configuration and management. - Removed the old wechat_reader.py from the root directory. - Adjusted usage instructions to reflect new script location.
● 可疑
安装命令 点击复制
官方npx clawhub@latest install wechat-article-explainer
镜像加速npx clawhub@latest install wechat-article-explainer --registry https://cn.clawhub-mirror.com
技能文档
概述
这个 Skill 用于阅读和用通俗的语言总结微信公众号链接的内容。
使用方法
当用户提供微信公众号文章链接时，按照以下步骤执行：
1. 验证链接格式
确认是有效的微信公众号链接，格式如下：
https://mp.weixin.qq.com/s/xxxhttps://mp.weixin.qq.com/s?xxx
2. 执行 Python 工具获取文章内容
使用 wechat_reader.py 工具抓取文章：
python3 scripts/wechat_reader.py "<文章链接>"
3. 总结文章内容
根据获取的文章内容，提供通俗内容解释：
- 文章标题：
- 作者/来源：
- 发布时间：
- 内容总结（通俗内容解释）：
技术细节
- Python 依赖：
requests（基础 HTTP 请求）
- playwright（浏览器模拟，更稳定）- 安装依赖：
pip install requests
# 或使用浏览器模式
pip install playwright
playwright install chromium
- 使用浏览器模式：默认使用 Playwright，更稳定但需要安装浏览器
- 不使用浏览器：
python3 wechat_reader.py--no-browser
注意事项
- 微信文章可能有防盗链限制，直接 HTTP 请求可能失败
- 浏览器模式更稳定但速度较慢
- 如果抓取失败，提示用户在微信中打开文章并复制内容
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制