Compétences baoyu-post-to-wechat
📦
baoyu-post-to-wechat
Révision du contenu r1 Critique 🌐 Accès réseau⚙️ Commandes externes📁 Accès au système de fichiers🔑 Variables d’environnement⚡ Contient des scripts
Publier des brouillons WeChat Official Account
La publication d’articles WeChat mis en forme nécessite souvent une copie manuelle, l’insertion d’images et la configuration de brouillons. Cette skill automatise la création de brouillons à partir de Markdown, HTML, texte et images via une session Chrome contrôlée.
Prend en charge: Claude Codex Code(CC)
N’installez pas automatiquement ce Skill.
La politique de référence exige un examen par un opérateur avant toute action d’installation.
Installer avec mon Agent
Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.
Demande d’agent
Review the Skillstore skill "baoyu-post-to-wechat" from https://skillstore.io/skills/jimliu-baoyu-post-to-wechat.md and its manifest at https://skillstore.io/api/skills/jimliu-baoyu-post-to-wechat/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.
Ressources lisibles par les agents
Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.
Tester
Utilisation de « baoyu-post-to-wechat ». Un article Markdown avec frontmatter, images intégrées et le thème grace.
Résultat attendu:
Un brouillon WeChat avec un titre, un auteur, un résumé, un corps d’article mis en forme et des assets d’images insérés.
Utilisation de « baoyu-post-to-wechat ». Un titre court, 1 200 caractères de texte et un dossier d’images produit.
Résultat attendu:
Un brouillon image-texte avec le titre et le corps raccourcis selon les limites de WeChat, et les images téléversées dans l’ordre trié.
Utilisation de « baoyu-post-to-wechat ». Un fichier HTML exporté depuis le moteur de rendu Markdown.
Résultat attendu:
Le contenu rendu copié via le presse-papiers système et collé dans l’éditeur d’articles WeChat.
Audit de sécurité
Critiquev5 • 09/07/2026 Ouvrir le rapport versionné
The skill provides useful WeChat publishing automation but relies on powerful local capabilities: Chrome DevTools control, persistent authenticated browser profiles, clipboard access, keyboard simulation, filesystem reads and writes, and external process execution. Several scanner hits are false positives from regex parsing, SVG markup, CSS, and localhost checks, but the overall behavior still requires strong user consent and sandboxing. Static review was capped at 400/677 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
27
Fichiers analysés
5,854
Lignes analysées
111
Éléments à examiner
0
Faux positifs ignorés
Préoccupations de sécurité confirmées (15)
Critique
Keylogger keywords
console.log(`Send real paste keystroke (Cmd+V / Ctrl+V) to the frontmost application
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
Critique
Keylogger keywords
// Build script that activates app (if specified) and sends keystroke in one atomic operation
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
Critique
Keylogger keywords
keystroke "v" using command down
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
Critique
Keylogger keywords
keystroke "v" using command down
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
Critique
Keylogger keywords
console.log(`[paste] Sending paste keystroke (retries=${retries}, delay=${delayMs}ms)...`);
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
Critique
Keylogger keywords
console.log('[paste] Paste keystroke sent successfully');
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
Critique
Keylogger keywords
console.error('[paste] Failed to send paste keystroke');
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
Critique
Keylogger keywords
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "c" using command down'
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
Afficher les 15 problèmes confirmés
Critique
Keylogger keywords
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "v" using command down'
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
Critique
Keylogger keywords
| `scripts/paste-from-clipboard.ts` | Send real paste keystroke |
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
Critique
[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
This combination is common in credential stealers and RATs
The code combines browser automation, local command execution, filesystem access, network access, and persisted browser profiles. That combination can publish content or access authenticated browser state if misused.
Élevé
scripts/wechat-agent-browser.ts:13-17scripts/wechat-agent-browser.ts:184-195scripts/wechat-agent-browser.ts:215-217
Shell Command Injection Risk in Browser Helper
The helper builds a shell command string for agent-browser and runs it with execSync. Later calls interpolate post title, content, selector, and image data into that command path, which can allow command injection or unintended browser actions if inputs contain shell metacharacters.
execSync receives a constructed shell string, and reviewed call sites interpolate workflow-controlled strings. The exact exploitability depends on inputs, but the pattern is strong.
Élevé
Authenticated Browser Session Automation
The skill launches Chrome with a persistent user data directory and controls an authenticated WeChat session over CDP. A compromised or misused workflow could operate inside the user account, save drafts, upload files, or interact with the editor without normal manual safeguards.
The reviewed files explicitly launch Chrome, persist a profile, connect via CDP, and wait for WeChat login. This confirms account-level browser automation intent.
Moyen
scripts/md-to-wechat.ts:73-83scripts/md/extensions/plantuml.ts:142-145scripts/md/extensions/plantuml.ts:191-199
Remote Markdown Assets and Diagram Rendering
Markdown conversion can download remote image URLs and PlantUML rendering can send encoded diagram text to an external PlantUML server. This may disclose source content or asset URLs during article preparation.
The code directly downloads http or https images and constructs PlantUML server URLs from diagram content. This is legitimate functionality but creates clear data disclosure risk.
Faible
Base64 encode
const base64 = btoa(String.fromCharCode(...utf8Bytes))
Base64-style encoding is used for PlantUML diagram URLs, not malware obfuscation. It is kept as a low-confidence confirmed transformation because it sends encoded user diagram text to a server.
Éléments d’évaluation des capacités (111)
Il s’agit de capacités locales réelles qui peuvent être attendues pour cette compétence ; elles nécessitent donc un examen, mais ne sont pas comptabilisées comme comportement malveillant confirmé.
Élevé
Node.js child_process module
import { spawn } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
Élevé
Node.js child_process module
import { spawn } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
Élevé
Node.js child_process module
import { spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
Élevé
Node.js child_process module
import { spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
Élevé
Node.js child_process module
import { execSync, spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
Élevé
Node.js child_process module
import { spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
Élevé
Node.js child_process module
import { spawn } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
Élevé
PowerShell invocation
await runCommand('powershell.exe', ['-NoProfile', '-Sta', '-Command', ps, '-Path', imagePath]);
PowerShell is used to manipulate the Windows clipboard or send paste actions. This is expected behavior, but it can affect system state outside the skill sandbox.
Élevé
PowerShell invocation
await runCommand('powershell.exe', ['-NoProfile', '-Sta', '-Command', ps, '-Path', htmlFilePath]);
PowerShell is used to manipulate the Windows clipboard or send paste actions. This is expected behavior, but it can affect system state outside the skill sandbox.
Élevé
PowerShell invocation
const result = spawnSync('powershell.exe', ['-NoProfile', '-Command', ps], { stdio: 'pipe' });
PowerShell is used to manipulate the Windows clipboard or send paste actions. This is expected behavior, but it can affect system state outside the skill sandbox.
Élevé
Process spawn
const chrome = spawn(chromePath, [
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
Élevé
Process spawn
const child = spawn(command, args, { stdio: ['pipe', 'pipe', 'pipe'] });
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
Élevé
Process spawn
const child = spawn(command, args, { stdio: ['pipe', 'pipe', 'pipe'] });
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
Élevé
Process spawn
const chrome = spawn(chromePath, [
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
Élevé
Synchronous process execution
const result = execSync(fullCmd, { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] });
execSync builds and runs an agent-browser shell command. Shell-based synchronous execution is risky, especially when command text includes workflow-controlled values.
Élevé
Synchronous spawn
const result = spawnSync('npx', ['-y', 'bun', renderScript, tempMdPath, '--theme', theme], {
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
Élevé
Synchronous spawn
const result = spawnSync('osascript', ['-e', script], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
Élevé
Synchronous spawn
const result = spawnSync('osascript', ['-e', script], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
Élevé
Synchronous spawn
const which = spawnSync('which', [tool.cmd], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
Élevé
Synchronous spawn
const result = spawnSync(tool.cmd, tool.args, { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
Élevé
Synchronous spawn
const result = spawnSync('powershell.exe', ['-NoProfile', '-Command', ps], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
Élevé
Synchronous spawn
const result = spawnSync('agent-browser', ['--session', SESSION, ...args], {
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
Élevé
Synchronous spawn
const result = spawnSync('npx', ['-y', 'bun', copyScript, 'image', imagePath], { stdio: 'inherit' })
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
Élevé
Synchronous spawn
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "c" using command down'
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
Élevé
Synchronous spawn
spawnSync('xdotool', ['key', 'ctrl+c']);
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
Élevé
Synchronous spawn
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "v" using command down'
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
Élevé
Synchronous spawn
spawnSync('xdotool', ['key', 'ctrl+v']);
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
Élevé
Synchronous spawn
const result = spawnSync('npx', args, { stdio: ['inherit', 'pipe', 'pipe'] });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
Moyen
Dynamic import() expression
const { Infographic, setDefaultFont, setFontExtendFactor, exportToSVG } = await import('@antv/infogr
Dynamic import is used for optional rendering or syntax highlighting modules. One path can load language modules from a CDN, which is a supply-chain and remote-code risk.
Moyen
Dynamic import() expression
const mermaid = await import("mermaid");
Dynamic import is used for optional rendering or syntax highlighting modules. One path can load language modules from a CDN, which is a supply-chain and remote-code risk.
Moyen
Dynamic import() expression
const module = await import(/* @vite-ignore */ grammarUrlFor(language))
Dynamic import is used for optional rendering or syntax highlighting modules. One path can load language modules from a CDN, which is a supply-chain and remote-code risk.
Moyen
File stream creation
fs.createReadStream(filePath).on('error', reject).pipe(child.stdin);
The code streams local files or downloaded content as part of clipboard and rendering operations. This is expected, but it handles user-selected file data.
Moyen
File stream creation
const file = fs.createWriteStream(destPath);
The code streams local files or downloaded content as part of clipboard and rendering operations. This is expected, but it handles user-selected file data.
Moyen
innerHTML assignment (XSS risk)
container.innerHTML = `<div style="color: red; padding: 10px; border: 1px solid red;">Infographic 渲染
The renderer writes generated HTML into the DOM. If untrusted Markdown or remote highlighting output reaches this path, it can create an XSS-style rendering risk.
Moyen
innerHTML assignment (XSS risk)
codeBlock.innerHTML = highlighted
The renderer writes generated HTML into the DOM. If untrusted Markdown or remote highlighting output reaches this path, it can create an XSS-style rendering risk.
Moyen
Node.js fs operations
fs.unlinkSync(destPath);
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
Moyen
Node.js fs operations
fs.unlinkSync(destPath);
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
Moyen
Node.js fs operations
fs.unlink(destPath, () => {});
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
Moyen
Node.js fs operations
const content = fs.readFileSync(markdownPath, 'utf-8');
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
Moyen
Node.js fs operations
baseCss: fs.readFileSync(basePath, "utf-8"),
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
Moyen
Node.js fs operations
themeCss: fs.readFileSync(themePath, "utf-8"),
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
Moyen
Node.js fs operations
const markdown = fs.readFileSync(inputPath, "utf-8");
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
Moyen
Node.js fs operations
fs.renameSync(outputPath, backupPath);
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
Moyen
Node.js fs operations
fs.writeFileSync(outputPath, html, "utf-8");
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
Moyen
Node.js fs operations
const content = fs.readFileSync(htmlPath, 'utf-8');
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
Moyen
Node.js fs operations
const text = fs.readFileSync(filePath, 'utf-8');
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
Moyen
outerHTML assignment (XSS risk)
placeholderElement.outerHTML = createPlantUMLHTML(imageUrl, options, svgContent)
The PlantUML renderer can replace DOM content with SVG fetched from a remote server. Injecting remote SVG into outerHTML is a real content injection risk.
Moyen
Synchronous file operations
const content = fs.readFileSync(markdownPath, 'utf-8');
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
Moyen
Synchronous file operations
baseCss: fs.readFileSync(basePath, "utf-8"),
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
Moyen
Synchronous file operations
themeCss: fs.readFileSync(themePath, "utf-8"),
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
Moyen
Synchronous file operations
const markdown = fs.readFileSync(inputPath, "utf-8");
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
Moyen
Synchronous file operations
fs.writeFileSync(outputPath, html, "utf-8");
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
Moyen
Synchronous file operations
const content = fs.readFileSync(htmlPath, 'utf-8');
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
Moyen
Synchronous file operations
const text = fs.readFileSync(filePath, 'utf-8');
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
Moyen
Temp directory access
const tempDir = await mkdtemp(path.join(os.tmpdir(), prefix));
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
Moyen
Temp directory access
const tempDir = options?.tempDir ?? path.join(os.tmpdir(), 'wechat-article-images');
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
Moyen
Temp directory access
"htmlPath": "/tmp/wechat-article-images/temp-article.html",
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
Moyen
Temp directory access
"localPath": "/tmp/wechat-article-images/img.png",
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
Moyen
WebSocket connection
const ws = new WebSocket(url);
The code connects to Chrome DevTools Protocol over WebSocket. This grants browser automation capability in an authenticated WeChat session.
Moyen
WebSocket connection
const ws = new WebSocket(url);
The code connects to Chrome DevTools Protocol over WebSocket. This grants browser automation capability in an authenticated WeChat session.
Faible
Environment variable access (dot notation)
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
Faible
Environment variable access (dot notation)
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
Faible
Environment variable access (dot notation)
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
Faible
Environment variable access (dot notation)
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
Faible
Environment variable object
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
Faible
Environment variable object
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
Faible
Environment variable object
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
Faible
Environment variable object
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
Faible
Fetch API call
const res = await fetch(url, { redirect: 'follow' });
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
Faible
Fetch API call
const response = await fetch(svgUrl)
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
Faible
Fetch API call
fetch('file://${img}').then(r => r.blob()).then(b => {
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
Faible
Fetch API call
const res = await fetch(url, { redirect: 'follow' });
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
Faible
Hardcoded URL
[Link text](https://example.com)
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
const version = await fetchJson<{ webSocketDebuggerUrl?: string }>(`http://127.0.0.1:${port}/json/ve
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
* https://github.com/bent10/marked-extensions/tree/main/packages/alert
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
* A [marked](https://marked.js.org/) extension to support [GFM alerts](https://github.com/orgs/commu
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
// 行内公式对齐 https://groups.google.com/g/mathjax-users/c/zThKffrrCvE?pli=1
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
* @default 'https://www.plantuml.com/plantuml'
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
* 基于官方文档 https://plantuml.com/text-encoding
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
* 基于官方文档 https://plantuml.com/text-encoding
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
* 基于官方文档 https://plantuml.com/text-encoding
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
serverUrl: options.serverUrl || `https://www.plantuml.com/plantuml`,
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
* https://talk.commonmark.org/t/proper-ruby-text-rb-syntax-support-in-markdown/2279
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
Original project: https://github.com/doocs/md
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
const HLJS_CDN_BASE = `https://cdn-doocs.oss-cn-shenzhen.aliyuncs.com/npm/highlightjs/${HLJS_VERSION
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
const WECHAT_URL = 'https://mp.weixin.qq.com/';
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
const WECHAT_URL = 'https://mp.weixin.qq.com/';
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
const WECHAT_URL = 'https://mp.weixin.qq.com/';
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Hardcoded URL
const version = await fetchJson<{ webSocketDebuggerUrl?: string }>(`http://127.0.0.1:${port}/json/ve
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
Faible
Node.js fs stat operations
if (override && fs.existsSync(override)) return override;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (fs.existsSync(p)) return p;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (!fs.existsSync(imagePath)) throw new Error(`File not found: ${imagePath}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (!fs.existsSync(htmlFilePath)) throw new Error(`File not found: ${htmlFilePath}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (!fs.existsSync(localPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (!fs.existsSync(htmlPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (!fs.existsSync(markdownPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (!fs.existsSync(basePath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (!fs.existsSync(themePath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (!fs.existsSync(inputPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (fs.existsSync(outputPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (!fs.existsSync(img)) throw new Error(`Image not found: ${img}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
} else if (htmlFile && fs.existsSync(htmlFile)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (effectiveHtmlFile && fs.existsSync(effectiveHtmlFile)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (fs.existsSync(img)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (override && fs.existsSync(override)) return override;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (fs.existsSync(p)) return p;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (!fs.existsSync(absPath)) throw new Error(`Markdown file not found: ${absPath}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (!fs.existsSync(absDir)) throw new Error(`Images directory not found: ${absDir}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Node.js fs stat operations
if (!fs.existsSync(img)) throw new Error(`Image not found: ${img}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
Faible
Temp file creation
import { mkdtemp, rm, writeFile } from 'node:fs/promises';
Temporary files are created for clipboard and rendered HTML workflows. This is expected but relevant because generated content may contain user data.
Faible
Temp file creation
const tempDir = await mkdtemp(path.join(os.tmpdir(), prefix));
Temporary files are created for clipboard and rendered HTML workflows. This is expected but relevant because generated content may contain user data.
Facteurs de risque
🌐 Accès réseau (49)
references/article-posting.md:51 scripts/cdp.ts:69 scripts/cdp.ts:132 scripts/cdp.ts:15 scripts/cdp.ts:80 scripts/cdp.ts:18 scripts/cdp.ts:80 scripts/md/extensions/alert.ts:21 scripts/md/extensions/alert.ts:23 scripts/md/extensions/alert.ts:153 scripts/md/extensions/alert.ts:157 scripts/md/extensions/alert.ts:165 scripts/md/extensions/alert.ts:171 scripts/md/extensions/alert.ts:176 scripts/md/extensions/alert.ts:181 scripts/md/extensions/alert.ts:186 scripts/md/extensions/alert.ts:191 scripts/md/extensions/alert.ts:196 scripts/md/extensions/alert.ts:201 scripts/md/extensions/alert.ts:206 scripts/md/extensions/alert.ts:211 scripts/md/extensions/alert.ts:216 scripts/md/extensions/alert.ts:221 scripts/md/extensions/alert.ts:226 scripts/md/extensions/alert.ts:231 scripts/md/extensions/alert.ts:236 scripts/md/extensions/alert.ts:241 scripts/md/extensions/alert.ts:251 scripts/md/extensions/alert.ts:256 scripts/md/extensions/katex.ts:26 scripts/md/extensions/plantuml.ts:193 scripts/md/extensions/plantuml.ts:7 scripts/md/extensions/plantuml.ts:35 scripts/md/extensions/plantuml.ts:61 scripts/md/extensions/plantuml.ts:78 scripts/md/extensions/plantuml.ts:241 scripts/md/extensions/ruby.ts:5 scripts/md/LICENSE:3 scripts/md/utils/languages.ts:80 scripts/wechat-agent-browser.ts:195 scripts/wechat-agent-browser.ts:6 scripts/wechat-article.ts:7 scripts/wechat-browser.ts:178 scripts/wechat-browser.ts:241 scripts/wechat-browser.ts:113 scripts/wechat-browser.ts:9 scripts/wechat-browser.ts:189 scripts/wechat-browser.ts:116 scripts/wechat-browser.ts:189
⚙️ Commandes externes (50)
scripts/cdp.ts:1 scripts/cdp.ts:184 scripts/cdp.ts:70 scripts/cdp.ts:80 scripts/cdp.ts:89 scripts/cdp.ts:155 scripts/cdp.ts:182 scripts/cdp.ts:185 scripts/cdp.ts:186 scripts/cdp.ts:204 scripts/cdp.ts:223 scripts/cdp.ts:228-236 scripts/cdp.ts:240 scripts/copy-to-clipboard.ts:1 scripts/copy-to-clipboard.ts:59 scripts/copy-to-clipboard.ts:96 scripts/copy-to-clipboard.ts:11-26 scripts/copy-to-clipboard.ts:79 scripts/copy-to-clipboard.ts:108 scripts/copy-to-clipboard.ts:129-186 scripts/copy-to-clipboard.ts:215 scripts/copy-to-clipboard.ts:227 scripts/copy-to-clipboard.ts:257 scripts/copy-to-clipboard.ts:260 scripts/copy-to-clipboard.ts:273 scripts/copy-to-clipboard.ts:279 scripts/copy-to-clipboard.ts:292 scripts/copy-to-clipboard.ts:327 scripts/copy-to-clipboard.ts:372 scripts/copy-to-clipboard.ts:377 scripts/copy-to-clipboard.ts:239 scripts/copy-to-clipboard.ts:249 scripts/md-to-wechat.ts:8 scripts/md-to-wechat.ts:178 scripts/md-to-wechat.ts:44 scripts/md-to-wechat.ts:77 scripts/md-to-wechat.ts:80 scripts/md-to-wechat.ts:151 scripts/md-to-wechat.ts:164-169 scripts/md-to-wechat.ts:169 scripts/md-to-wechat.ts:177-185 scripts/md-to-wechat.ts:185-190 scripts/md-to-wechat.ts:190-213 scripts/md-to-wechat.ts:239-270 scripts/md-to-wechat.ts:270-279 scripts/md/extensions/alert.ts:116 scripts/md/extensions/alert.ts:26 scripts/md/extensions/alert.ts:36 scripts/md/extensions/alert.ts:47 scripts/md/extensions/alert.ts:48
📁 Accès au système de fichiers (50)
scripts/cdp.ts:35 scripts/cdp.ts:58 scripts/copy-to-clipboard.ts:260 scripts/copy-to-clipboard.ts:279 scripts/copy-to-clipboard.ts:115 scripts/copy-to-clipboard.ts:120 scripts/copy-to-clipboard.ts:3 scripts/copy-to-clipboard.ts:120 scripts/md-to-wechat.ts:35 scripts/md-to-wechat.ts:43 scripts/md-to-wechat.ts:57 scripts/md-to-wechat.ts:118 scripts/md-to-wechat.ts:79 scripts/md-to-wechat.ts:189 scripts/md-to-wechat.ts:269 scripts/md-to-wechat.ts:118 scripts/md-to-wechat.ts:28 scripts/md-to-wechat.ts:145 scripts/md-to-wechat.ts:120 scripts/md-to-wechat.ts:226 scripts/md-to-wechat.ts:230 scripts/md/extensions/alert.ts:116 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/toc.ts:34 scripts/md/render.ts:557 scripts/md/render.ts:558 scripts/md/render.ts:628 scripts/md/render.ts:643 scripts/md/render.ts:646 scripts/md/render.ts:548 scripts/md/render.ts:552 scripts/md/render.ts:616 scripts/md/render.ts:641 scripts/md/render.ts:557 scripts/md/render.ts:558 scripts/md/render.ts:628 scripts/md/render.ts:646 scripts/md/render.ts:181 scripts/md/render.ts:343 scripts/wechat-agent-browser.ts:98 scripts/wechat-article.ts:149 scripts/wechat-article.ts:236 scripts/wechat-article.ts:300 scripts/wechat-article.ts:338 scripts/wechat-article.ts:149 scripts/wechat-browser.ts:18 scripts/wechat-browser.ts:133 scripts/wechat-browser.ts:167 scripts/wechat-browser.ts:298
🔑 Variables d’environnement (8)
⚡ Contient des scripts (16)
scripts/md/extensions/alert.ts:116 scripts/md/extensions/infographic.ts:12 scripts/md/extensions/infographic.ts:77 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/markup.ts:21 scripts/md/extensions/markup.ts:45 scripts/md/extensions/markup.ts:71 scripts/md/extensions/plantuml.ts:170 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/ruby.ts:31 scripts/md/extensions/ruby.ts:44 scripts/md/extensions/toc.ts:34 scripts/md/render.ts:268 scripts/md/utils/languages.ts:112 scripts/md/utils/languages.ts:202 scripts/paste-from-clipboard.ts:32
Motifs détectés
Keylogger keywords×10[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
Audité par: claude Voir l’historique des audits →
Partager et citer ce rapport
Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.
Copier le lien du rapport
https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportBadge Markdown
[](https://skillstore.io/skills/jimliu-baoyu-post-to-wechat?utm_source=security_passport_badge)Badge HTML
<a href="https://skillstore.io/skills/jimliu-baoyu-post-to-wechat?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/jimliu-baoyu-post-to-wechat/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Carte intégrable
<iframe src="https://skillstore.io/embed/skills/jimliu-baoyu-post-to-wechat.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citations académiques (APA · BibTeX · CFF)
Citation APA
JimLiu. (2026). baoyu-post-to-wechat security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5Citation BibTeX
@techreport{jimliu-jimliu-baoyu-post-to-wechat-2026,
author = {JimLiu},
title = {baoyu-post-to-wechat security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "baoyu-post-to-wechat security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "JimLiu"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5"
identifiers:
- type: other
value: "skillstore:jimliu-baoyu-post-to-wechat:audit:5"
description: "Skillstore immutable audit report identifier"
Score Skillstore
Pourquoi ce score Niveau de confiance des preuves: Moyen 64
Architecture
85
Maintenabilité
85
Contenu
72
Communauté
83
Conformité aux spécifications
Ce que vous pouvez créer
Publier un brouillon d’article mis en forme
Convertir un article Markdown en contenu d’éditeur WeChat avec titre, auteur, résumé et images intégrées.
Créer une mise à jour image-texte
Préparer une courte publication WeChat avec un titre condensé, un texte concis et un lot d’images locales.
Automatiser les étapes de publication récurrentes
Utiliser Claude Code ou Codex pour exécuter le workflow de publication après avoir examiné les fichiers source et les assets d’images.
Essayez ces prompts
Publier un simple brouillon image-texte
Utilise cette skill pour créer un brouillon image-texte WeChat avec le titre "{title}", le contenu de "{summary}" et les images de "{image_folder}". Ne le soumets pas.Convertir Markdown en brouillon d’article
Convertis "{markdown_file}" en brouillon d’article WeChat avec le thème "grace". Insère les images référencées et enregistre le résultat comme brouillon.Préparer une publication de campagne relue
Vérifie "{markdown_file}" et "{image_folder}" pour repérer les assets manquants, puis crée un brouillon WeChat. Indique-moi ce qui a été raccourci ou modifié avant l’enregistrement.Exécuter un workflow de publication contrôlé
Utilise l’automatisation navigateur WeChat uniquement après avoir confirmé que Chrome est disponible et que je suis connecté. Crée le brouillon à partir de "{markdown_file}", garde le navigateur ouvert et ne clique pas sur submit sans mon approbation.Bonnes pratiques
- Exécuter le workflow dans un profil de navigateur dédié et relire le brouillon avant de le soumettre.
- Utiliser des fichiers image locaux lorsque c’est possible afin d’éviter le téléchargement d’assets distants pendant la publication.
- Garder WeChat, Chrome, le presse-papiers et les autorisations d’accessibilité visibles lors de la première exécution.
Éviter
- Ne pas exécuter la skill sur du Markdown non fiable sans vérifier les liens d’images distantes et les diagrammes intégrés.
- Ne pas autoriser la soumission automatique pour les publications nécessitant une validation juridique, de marque ou éditoriale.
- Ne pas utiliser l’automatisation du presse-papiers pendant que des applications sensibles sont au premier plan.
Foire aux questions
Cette skill publie-t-elle directement sur WeChat ?
Elle peut créer et enregistrer des brouillons. La soumission dépend des options de commande et doit être relue avant approbation.
Pourquoi a-t-elle besoin de Chrome ?
La skill contrôle l’interface web WeChat Official Account via l’automatisation Chrome et une connexion de débogage locale.
Peut-elle fonctionner sans connexion ?
Non. Un utilisateur doit se connecter à la page WeChat Official Account, généralement en scannant un QR code.
Utilise-t-elle le presse-papiers système ?
Oui. Certaines étapes d’insertion d’articles et d’images copient du HTML enrichi ou des images dans le presse-papiers, puis les collent dans l’éditeur.
Peut-elle gérer les images distantes dans Markdown ?
Oui. Le script de conversion peut télécharger des URLs d’images distantes dans un dossier temporaire avant l’insertion.
Est-il sûr de l’exécuter automatiquement ?
Elle nécessite de la prudence, car elle lance des navigateurs, exécute des commandes externes, utilise le presse-papiers et envoie des événements clavier.
Détails du développeur
Auteur
JimLiuLicence
MIT
Révision Skillstore
r1
Avis de version
L’auteur n’a déclaré aucune version.
Réf
1ffa7643651792ccb4bd3b15d924d2c97edff755
Récence de maintenance
18/07/2026
Utilisation
122 téléchargements · 302 vues