📦 Wechat Quick Setup — 微信小程序极速搭建
v1.0.0一键生成云函数、配置后端并产出完整代码，10分钟内完成微信小程序全栈搭建，适合快速验证与上线。
0· 121·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This package appears to be a local scaffolding tool for WeChat mini programs, but there are some inconsistencies and missing pieces. Before running anything: 1) Inspect the included scripts (init.js, generate-function.js, generate-page.js) yourself — they simply write files but you should review the exact contents. 2) Note SKILL.md references setup-cloud.js which is NOT bundled; expect that some setup steps may be manual or missing. 3) Run the scripts in a disposable/test directory (not your hom...详细分析 ▾
ℹ 用途与能力
Name/description match the included scripts: init.js generates a project scaffold and generate-function.js / generate-page.js produce cloud functions and pages for a WeChat mini program. The templates reference wx-server-sdk and Tencent Cloud features which are coherent with the stated Tencent-cloud backend.
⚠ 指令范围
SKILL.md instructs running several node scripts from ~/.openclaw/skills/wechat-quick-setup and editing ~/.openclaw/skills/wechat-quick-setup/config.json. However, SKILL.md references setup-cloud.js (node .../setup-cloud.js) which is not present in the package. The documented config.json is not read by the included scripts (no code in the bundle reads that file), so the runtime instructions are partially inconsistent/broken. The templates include a payment cloudFunction that would require payment credentials when deployed, but the skill does not document or request those credentials.
✓ 安装机制
This is an instruction-only skill with included Node.js generator scripts; there is no install spec, no remote downloads, and nothing writes to system-wide locations. The risk is typical for local scaffolding code: running the scripts will create files in the current working directory (expected behavior).
ℹ 凭证需求
The skill declares no required environment variables or credentials. That is consistent with local scaffolding. One caveat: some generated templates (payment / cloudPay) will require Tencent/WeChat payment credentials when deployed — those are not requested by the skill and are external to the scaffolding step. No evidence the skill attempts to read or exfiltrate host credentials.
✓ 持久化与权限
The skill is not always-enabled and is user-invocable. It does not ask to persistently modify other skills or global agent settings. Its scripts create project files only under the target project directory.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/24
NULL
● Pending
安装命令
点击复制官方npx clawhub@latest install wechat-quick-setup
镜像加速npx clawhub@latest install wechat-quick-setup --registry https://cn.longxiaskill.com