wechat-mp-smart-publish
Automates the process of publishing Markdown articles to WeChat's draft box, optimizing titles and formatting for effective content management.
Install this skill
or
72/100
Security score
The wechat-mp-smart-publish skill was audited on May 16, 2026 and we found 6 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 183
Curl to non-GitHub URL
SourceSKILL.md
| 183 | A: 检查 OpenClaw browser 是否运行：`curl -s http://127.0.0.1:18800/json/version` |
medium line 36
Access to hidden dotfiles in home directory
SourceSKILL.md
| 36 | | 微信 Cookie | Playwright state 文件有效 | `cat ~/.playwright-data/wechat/state-default.json \| python3 -c "import json,sys; d=json.load(sys.stdin); print(f'Cookies: {len(d.get(\"cookies\",[]))}')"` | |
medium line 169
Access to hidden dotfiles in home directory
SourceSKILL.md
| 169 | - Cookie 文件位置：`~/.playwright-data/wechat/state-default.json` |
low line 177
External URL reference
SourceSKILL.md
| 177 | A: Cookie 过期，需重新扫码登录。执行：`openclaw browser open --url https://mp.weixin.qq.com` |
low line 183
External URL reference
SourceSKILL.md
| 183 | A: 检查 OpenClaw browser 是否运行：`curl -s http://127.0.0.1:18800/json/version` |
low line 188
External URL reference
SourceSKILL.md
| 188 | openclaw browser open --url https://mp.weixin.qq.com |
Scanned on May 16, 2026
View Security Dashboard