スキル baoyu-post-to-wechat
📦
baoyu-post-to-wechat
コンテンツリビジョン r1 重大 🌐 ネットワークアクセス⚙️ 外部コマンド📁 ファイルシステムへのアクセス🔑 環境変数⚡ スクリプトを含む
WeChat Official Accountの下書きを公開
整形済みのWeChat記事を公開するには、多くの場合、手動でのコピー、画像挿入、下書き設定が必要です。このスキルは、制御されたChromeセッションを通じて、Markdown、HTML、テキスト、画像からの下書き作成を自動化します。
対応: Claude Codex Code(CC)
この Skill を自動インストールしないでください。
基準ポリシーにより、インストール操作の前にオペレーターのレビューが必要です。
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "baoyu-post-to-wechat" from https://skillstore.io/skills/jimliu-baoyu-post-to-wechat.md and its manifest at https://skillstore.io/api/skills/jimliu-baoyu-post-to-wechat/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「baoyu-post-to-wechat」を使用しています。 frontmatter、インライン画像、graceテーマを含むMarkdown記事。
期待される結果:
タイトル、著者、概要、整形済みの記事本文、挿入された画像アセットが入力されたWeChat下書き。
「baoyu-post-to-wechat」を使用しています。 短いタイトル、1,200文字のテキスト、商品画像のフォルダ。
期待される結果:
タイトルと本文がWeChatの制限に合わせて短縮され、画像がソート順でアップロードされた画像テキスト下書き。
「baoyu-post-to-wechat」を使用しています。 MarkdownレンダラーからエクスポートされたHTMLファイル。
期待される結果:
システムクリップボードを通じてコピーされ、WeChat記事エディタに貼り付けられたレンダリング済みコンテンツ。
セキュリティ監査
重大v5 • 2026/7/9 バージョン別レポートを開く
The skill provides useful WeChat publishing automation but relies on powerful local capabilities: Chrome DevTools control, persistent authenticated browser profiles, clipboard access, keyboard simulation, filesystem reads and writes, and external process execution. Several scanner hits are false positives from regex parsing, SVG markup, CSS, and localhost checks, but the overall behavior still requires strong user consent and sandboxing. Static review was capped at 400/677 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
27
スキャンされたファイル
5,854
解析済み行数
111
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (15)
重大
Keylogger keywords
console.log(`Send real paste keystroke (Cmd+V / Ctrl+V) to the frontmost application
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
重大
Keylogger keywords
// Build script that activates app (if specified) and sends keystroke in one atomic operation
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
重大
Keylogger keywords
keystroke "v" using command down
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
重大
Keylogger keywords
keystroke "v" using command down
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
重大
Keylogger keywords
console.log(`[paste] Sending paste keystroke (retries=${retries}, delay=${delayMs}ms)...`);
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
重大
Keylogger keywords
console.log('[paste] Paste keystroke sent successfully');
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
重大
Keylogger keywords
console.error('[paste] Failed to send paste keystroke');
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
重大
Keylogger keywords
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "c" using command down'
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
確認済みの15件をすべて表示
重大
Keylogger keywords
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "v" using command down'
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
重大
Keylogger keywords
| `scripts/paste-from-clipboard.ts` | Send real paste keystroke |
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
重大
[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
This combination is common in credential stealers and RATs
The code combines browser automation, local command execution, filesystem access, network access, and persisted browser profiles. That combination can publish content or access authenticated browser state if misused.
高
scripts/wechat-agent-browser.ts:13-17scripts/wechat-agent-browser.ts:184-195scripts/wechat-agent-browser.ts:215-217
Shell Command Injection Risk in Browser Helper
The helper builds a shell command string for agent-browser and runs it with execSync. Later calls interpolate post title, content, selector, and image data into that command path, which can allow command injection or unintended browser actions if inputs contain shell metacharacters.
execSync receives a constructed shell string, and reviewed call sites interpolate workflow-controlled strings. The exact exploitability depends on inputs, but the pattern is strong.
高
Authenticated Browser Session Automation
The skill launches Chrome with a persistent user data directory and controls an authenticated WeChat session over CDP. A compromised or misused workflow could operate inside the user account, save drafts, upload files, or interact with the editor without normal manual safeguards.
The reviewed files explicitly launch Chrome, persist a profile, connect via CDP, and wait for WeChat login. This confirms account-level browser automation intent.
中
scripts/md-to-wechat.ts:73-83scripts/md/extensions/plantuml.ts:142-145scripts/md/extensions/plantuml.ts:191-199
Remote Markdown Assets and Diagram Rendering
Markdown conversion can download remote image URLs and PlantUML rendering can send encoded diagram text to an external PlantUML server. This may disclose source content or asset URLs during article preparation.
The code directly downloads http or https images and constructs PlantUML server URLs from diagram content. This is legitimate functionality but creates clear data disclosure risk.
低
Base64 encode
const base64 = btoa(String.fromCharCode(...utf8Bytes))
Base64-style encoding is used for PlantUML diagram URLs, not malware obfuscation. It is kept as a low-confidence confirmed transformation because it sends encoded user diagram text to a server.
機能レビュー項目 (111)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
高
Node.js child_process module
import { spawn } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
高
Node.js child_process module
import { spawn } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
高
Node.js child_process module
import { spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
高
Node.js child_process module
import { spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
高
Node.js child_process module
import { execSync, spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
高
Node.js child_process module
import { spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
高
Node.js child_process module
import { spawn } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
高
PowerShell invocation
await runCommand('powershell.exe', ['-NoProfile', '-Sta', '-Command', ps, '-Path', imagePath]);
PowerShell is used to manipulate the Windows clipboard or send paste actions. This is expected behavior, but it can affect system state outside the skill sandbox.
高
PowerShell invocation
await runCommand('powershell.exe', ['-NoProfile', '-Sta', '-Command', ps, '-Path', htmlFilePath]);
PowerShell is used to manipulate the Windows clipboard or send paste actions. This is expected behavior, but it can affect system state outside the skill sandbox.
高
PowerShell invocation
const result = spawnSync('powershell.exe', ['-NoProfile', '-Command', ps], { stdio: 'pipe' });
PowerShell is used to manipulate the Windows clipboard or send paste actions. This is expected behavior, but it can affect system state outside the skill sandbox.
高
Process spawn
const chrome = spawn(chromePath, [
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
高
Process spawn
const child = spawn(command, args, { stdio: ['pipe', 'pipe', 'pipe'] });
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
高
Process spawn
const child = spawn(command, args, { stdio: ['pipe', 'pipe', 'pipe'] });
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
高
Process spawn
const chrome = spawn(chromePath, [
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
高
Synchronous process execution
const result = execSync(fullCmd, { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] });
execSync builds and runs an agent-browser shell command. Shell-based synchronous execution is risky, especially when command text includes workflow-controlled values.
高
Synchronous spawn
const result = spawnSync('npx', ['-y', 'bun', renderScript, tempMdPath, '--theme', theme], {
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const result = spawnSync('osascript', ['-e', script], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const result = spawnSync('osascript', ['-e', script], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const which = spawnSync('which', [tool.cmd], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const result = spawnSync(tool.cmd, tool.args, { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const result = spawnSync('powershell.exe', ['-NoProfile', '-Command', ps], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const result = spawnSync('agent-browser', ['--session', SESSION, ...args], {
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const result = spawnSync('npx', ['-y', 'bun', copyScript, 'image', imagePath], { stdio: 'inherit' })
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "c" using command down'
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
spawnSync('xdotool', ['key', 'ctrl+c']);
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "v" using command down'
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
spawnSync('xdotool', ['key', 'ctrl+v']);
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const result = spawnSync('npx', args, { stdio: ['inherit', 'pipe', 'pipe'] });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
中
Dynamic import() expression
const { Infographic, setDefaultFont, setFontExtendFactor, exportToSVG } = await import('@antv/infogr
Dynamic import is used for optional rendering or syntax highlighting modules. One path can load language modules from a CDN, which is a supply-chain and remote-code risk.
中
Dynamic import() expression
const mermaid = await import("mermaid");
Dynamic import is used for optional rendering or syntax highlighting modules. One path can load language modules from a CDN, which is a supply-chain and remote-code risk.
中
Dynamic import() expression
const module = await import(/* @vite-ignore */ grammarUrlFor(language))
Dynamic import is used for optional rendering or syntax highlighting modules. One path can load language modules from a CDN, which is a supply-chain and remote-code risk.
中
File stream creation
fs.createReadStream(filePath).on('error', reject).pipe(child.stdin);
The code streams local files or downloaded content as part of clipboard and rendering operations. This is expected, but it handles user-selected file data.
中
File stream creation
const file = fs.createWriteStream(destPath);
The code streams local files or downloaded content as part of clipboard and rendering operations. This is expected, but it handles user-selected file data.
中
innerHTML assignment (XSS risk)
container.innerHTML = `<div style="color: red; padding: 10px; border: 1px solid red;">Infographic 渲染
The renderer writes generated HTML into the DOM. If untrusted Markdown or remote highlighting output reaches this path, it can create an XSS-style rendering risk.
中
innerHTML assignment (XSS risk)
codeBlock.innerHTML = highlighted
The renderer writes generated HTML into the DOM. If untrusted Markdown or remote highlighting output reaches this path, it can create an XSS-style rendering risk.
中
Node.js fs operations
fs.unlinkSync(destPath);
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
fs.unlinkSync(destPath);
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
fs.unlink(destPath, () => {});
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
const content = fs.readFileSync(markdownPath, 'utf-8');
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
baseCss: fs.readFileSync(basePath, "utf-8"),
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
themeCss: fs.readFileSync(themePath, "utf-8"),
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
const markdown = fs.readFileSync(inputPath, "utf-8");
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
fs.renameSync(outputPath, backupPath);
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
fs.writeFileSync(outputPath, html, "utf-8");
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
const content = fs.readFileSync(htmlPath, 'utf-8');
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
const text = fs.readFileSync(filePath, 'utf-8');
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
outerHTML assignment (XSS risk)
placeholderElement.outerHTML = createPlantUMLHTML(imageUrl, options, svgContent)
The PlantUML renderer can replace DOM content with SVG fetched from a remote server. Injecting remote SVG into outerHTML is a real content injection risk.
中
Synchronous file operations
const content = fs.readFileSync(markdownPath, 'utf-8');
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
中
Synchronous file operations
baseCss: fs.readFileSync(basePath, "utf-8"),
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
中
Synchronous file operations
themeCss: fs.readFileSync(themePath, "utf-8"),
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
中
Synchronous file operations
const markdown = fs.readFileSync(inputPath, "utf-8");
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
中
Synchronous file operations
fs.writeFileSync(outputPath, html, "utf-8");
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
中
Synchronous file operations
const content = fs.readFileSync(htmlPath, 'utf-8');
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
中
Synchronous file operations
const text = fs.readFileSync(filePath, 'utf-8');
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
中
Temp directory access
const tempDir = await mkdtemp(path.join(os.tmpdir(), prefix));
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
中
Temp directory access
const tempDir = options?.tempDir ?? path.join(os.tmpdir(), 'wechat-article-images');
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
中
Temp directory access
"htmlPath": "/tmp/wechat-article-images/temp-article.html",
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
中
Temp directory access
"localPath": "/tmp/wechat-article-images/img.png",
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
中
WebSocket connection
const ws = new WebSocket(url);
The code connects to Chrome DevTools Protocol over WebSocket. This grants browser automation capability in an authenticated WeChat session.
中
WebSocket connection
const ws = new WebSocket(url);
The code connects to Chrome DevTools Protocol over WebSocket. This grants browser automation capability in an authenticated WeChat session.
低
Environment variable access (dot notation)
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
低
Environment variable access (dot notation)
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
低
Environment variable access (dot notation)
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
低
Environment variable access (dot notation)
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
低
Environment variable object
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
低
Environment variable object
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
低
Environment variable object
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
低
Environment variable object
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
低
Fetch API call
const res = await fetch(url, { redirect: 'follow' });
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
低
Fetch API call
const response = await fetch(svgUrl)
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
低
Fetch API call
fetch('file://${img}').then(r => r.blob()).then(b => {
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
低
Fetch API call
const res = await fetch(url, { redirect: 'follow' });
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
低
Hardcoded URL
[Link text](https://example.com)
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
const version = await fetchJson<{ webSocketDebuggerUrl?: string }>(`http://127.0.0.1:${port}/json/ve
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
* https://github.com/bent10/marked-extensions/tree/main/packages/alert
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
* A [marked](https://marked.js.org/) extension to support [GFM alerts](https://github.com/orgs/commu
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
// 行内公式对齐 https://groups.google.com/g/mathjax-users/c/zThKffrrCvE?pli=1
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
* @default 'https://www.plantuml.com/plantuml'
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
* 基于官方文档 https://plantuml.com/text-encoding
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
* 基于官方文档 https://plantuml.com/text-encoding
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
* 基于官方文档 https://plantuml.com/text-encoding
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
serverUrl: options.serverUrl || `https://www.plantuml.com/plantuml`,
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
* https://talk.commonmark.org/t/proper-ruby-text-rb-syntax-support-in-markdown/2279
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
Original project: https://github.com/doocs/md
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
const HLJS_CDN_BASE = `https://cdn-doocs.oss-cn-shenzhen.aliyuncs.com/npm/highlightjs/${HLJS_VERSION
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
const WECHAT_URL = 'https://mp.weixin.qq.com/';
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
const WECHAT_URL = 'https://mp.weixin.qq.com/';
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
const WECHAT_URL = 'https://mp.weixin.qq.com/';
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
const version = await fetchJson<{ webSocketDebuggerUrl?: string }>(`http://127.0.0.1:${port}/json/ve
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Node.js fs stat operations
if (override && fs.existsSync(override)) return override;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (fs.existsSync(p)) return p;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(imagePath)) throw new Error(`File not found: ${imagePath}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(htmlFilePath)) throw new Error(`File not found: ${htmlFilePath}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(localPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(htmlPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(markdownPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(basePath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(themePath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(inputPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (fs.existsSync(outputPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(img)) throw new Error(`Image not found: ${img}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
} else if (htmlFile && fs.existsSync(htmlFile)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (effectiveHtmlFile && fs.existsSync(effectiveHtmlFile)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (fs.existsSync(img)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (override && fs.existsSync(override)) return override;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (fs.existsSync(p)) return p;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(absPath)) throw new Error(`Markdown file not found: ${absPath}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(absDir)) throw new Error(`Images directory not found: ${absDir}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(img)) throw new Error(`Image not found: ${img}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Temp file creation
import { mkdtemp, rm, writeFile } from 'node:fs/promises';
Temporary files are created for clipboard and rendered HTML workflows. This is expected but relevant because generated content may contain user data.
低
Temp file creation
const tempDir = await mkdtemp(path.join(os.tmpdir(), prefix));
Temporary files are created for clipboard and rendered HTML workflows. This is expected but relevant because generated content may contain user data.
リスク要因
🌐 ネットワークアクセス (49)
references/article-posting.md:51 scripts/cdp.ts:69 scripts/cdp.ts:132 scripts/cdp.ts:15 scripts/cdp.ts:80 scripts/cdp.ts:18 scripts/cdp.ts:80 scripts/md/extensions/alert.ts:21 scripts/md/extensions/alert.ts:23 scripts/md/extensions/alert.ts:153 scripts/md/extensions/alert.ts:157 scripts/md/extensions/alert.ts:165 scripts/md/extensions/alert.ts:171 scripts/md/extensions/alert.ts:176 scripts/md/extensions/alert.ts:181 scripts/md/extensions/alert.ts:186 scripts/md/extensions/alert.ts:191 scripts/md/extensions/alert.ts:196 scripts/md/extensions/alert.ts:201 scripts/md/extensions/alert.ts:206 scripts/md/extensions/alert.ts:211 scripts/md/extensions/alert.ts:216 scripts/md/extensions/alert.ts:221 scripts/md/extensions/alert.ts:226 scripts/md/extensions/alert.ts:231 scripts/md/extensions/alert.ts:236 scripts/md/extensions/alert.ts:241 scripts/md/extensions/alert.ts:251 scripts/md/extensions/alert.ts:256 scripts/md/extensions/katex.ts:26 scripts/md/extensions/plantuml.ts:193 scripts/md/extensions/plantuml.ts:7 scripts/md/extensions/plantuml.ts:35 scripts/md/extensions/plantuml.ts:61 scripts/md/extensions/plantuml.ts:78 scripts/md/extensions/plantuml.ts:241 scripts/md/extensions/ruby.ts:5 scripts/md/LICENSE:3 scripts/md/utils/languages.ts:80 scripts/wechat-agent-browser.ts:195 scripts/wechat-agent-browser.ts:6 scripts/wechat-article.ts:7 scripts/wechat-browser.ts:178 scripts/wechat-browser.ts:241 scripts/wechat-browser.ts:113 scripts/wechat-browser.ts:9 scripts/wechat-browser.ts:189 scripts/wechat-browser.ts:116 scripts/wechat-browser.ts:189
⚙️ 外部コマンド (50)
scripts/cdp.ts:1 scripts/cdp.ts:184 scripts/cdp.ts:70 scripts/cdp.ts:80 scripts/cdp.ts:89 scripts/cdp.ts:155 scripts/cdp.ts:182 scripts/cdp.ts:185 scripts/cdp.ts:186 scripts/cdp.ts:204 scripts/cdp.ts:223 scripts/cdp.ts:228-236 scripts/cdp.ts:240 scripts/copy-to-clipboard.ts:1 scripts/copy-to-clipboard.ts:59 scripts/copy-to-clipboard.ts:96 scripts/copy-to-clipboard.ts:11-26 scripts/copy-to-clipboard.ts:79 scripts/copy-to-clipboard.ts:108 scripts/copy-to-clipboard.ts:129-186 scripts/copy-to-clipboard.ts:215 scripts/copy-to-clipboard.ts:227 scripts/copy-to-clipboard.ts:257 scripts/copy-to-clipboard.ts:260 scripts/copy-to-clipboard.ts:273 scripts/copy-to-clipboard.ts:279 scripts/copy-to-clipboard.ts:292 scripts/copy-to-clipboard.ts:327 scripts/copy-to-clipboard.ts:372 scripts/copy-to-clipboard.ts:377 scripts/copy-to-clipboard.ts:239 scripts/copy-to-clipboard.ts:249 scripts/md-to-wechat.ts:8 scripts/md-to-wechat.ts:178 scripts/md-to-wechat.ts:44 scripts/md-to-wechat.ts:77 scripts/md-to-wechat.ts:80 scripts/md-to-wechat.ts:151 scripts/md-to-wechat.ts:164-169 scripts/md-to-wechat.ts:169 scripts/md-to-wechat.ts:177-185 scripts/md-to-wechat.ts:185-190 scripts/md-to-wechat.ts:190-213 scripts/md-to-wechat.ts:239-270 scripts/md-to-wechat.ts:270-279 scripts/md/extensions/alert.ts:116 scripts/md/extensions/alert.ts:26 scripts/md/extensions/alert.ts:36 scripts/md/extensions/alert.ts:47 scripts/md/extensions/alert.ts:48
📁 ファイルシステムへのアクセス (50)
scripts/cdp.ts:35 scripts/cdp.ts:58 scripts/copy-to-clipboard.ts:260 scripts/copy-to-clipboard.ts:279 scripts/copy-to-clipboard.ts:115 scripts/copy-to-clipboard.ts:120 scripts/copy-to-clipboard.ts:3 scripts/copy-to-clipboard.ts:120 scripts/md-to-wechat.ts:35 scripts/md-to-wechat.ts:43 scripts/md-to-wechat.ts:57 scripts/md-to-wechat.ts:118 scripts/md-to-wechat.ts:79 scripts/md-to-wechat.ts:189 scripts/md-to-wechat.ts:269 scripts/md-to-wechat.ts:118 scripts/md-to-wechat.ts:28 scripts/md-to-wechat.ts:145 scripts/md-to-wechat.ts:120 scripts/md-to-wechat.ts:226 scripts/md-to-wechat.ts:230 scripts/md/extensions/alert.ts:116 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/toc.ts:34 scripts/md/render.ts:557 scripts/md/render.ts:558 scripts/md/render.ts:628 scripts/md/render.ts:643 scripts/md/render.ts:646 scripts/md/render.ts:548 scripts/md/render.ts:552 scripts/md/render.ts:616 scripts/md/render.ts:641 scripts/md/render.ts:557 scripts/md/render.ts:558 scripts/md/render.ts:628 scripts/md/render.ts:646 scripts/md/render.ts:181 scripts/md/render.ts:343 scripts/wechat-agent-browser.ts:98 scripts/wechat-article.ts:149 scripts/wechat-article.ts:236 scripts/wechat-article.ts:300 scripts/wechat-article.ts:338 scripts/wechat-article.ts:149 scripts/wechat-browser.ts:18 scripts/wechat-browser.ts:133 scripts/wechat-browser.ts:167 scripts/wechat-browser.ts:298
🔑 環境変数 (8)
⚡ スクリプトを含む (16)
scripts/md/extensions/alert.ts:116 scripts/md/extensions/infographic.ts:12 scripts/md/extensions/infographic.ts:77 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/markup.ts:21 scripts/md/extensions/markup.ts:45 scripts/md/extensions/markup.ts:71 scripts/md/extensions/plantuml.ts:170 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/ruby.ts:31 scripts/md/extensions/ruby.ts:44 scripts/md/extensions/toc.ts:34 scripts/md/render.ts:268 scripts/md/utils/languages.ts:112 scripts/md/utils/languages.ts:202 scripts/paste-from-clipboard.ts:32
検出されたパターン
Keylogger keywords×10[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
監査者: claude 監査履歴を表示 →
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/jimliu-baoyu-post-to-wechat?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/jimliu-baoyu-post-to-wechat?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/jimliu-baoyu-post-to-wechat/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/jimliu-baoyu-post-to-wechat.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
JimLiu. (2026). baoyu-post-to-wechat security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5BibTeX形式の引用
@techreport{jimliu-jimliu-baoyu-post-to-wechat-2026,
author = {JimLiu},
title = {baoyu-post-to-wechat security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "baoyu-post-to-wechat security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "JimLiu"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5"
identifiers:
- type: other
value: "skillstore:jimliu-baoyu-post-to-wechat:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 64
アーキテクチャ
85
保守性
85
コンテンツ
72
コミュニティ
83
仕様準拠
作成できるもの
整形済みの記事下書きを公開
Markdown記事を、タイトル、著者、概要、インライン画像を含むWeChatエディタ用コンテンツに変換します。
画像テキスト更新を作成
短縮されたタイトル、簡潔な本文、一括のローカル画像を含む短いWeChat投稿を準備します。
繰り返し投稿手順を自動化
ソースファイルと画像アセットを確認した後、Claude CodeまたはCodexを使用して投稿ワークフローを実行します。
これらのプロンプトを試す
シンプルな画像テキスト下書きを投稿
Use this skill to create a WeChat image-text draft with title "{title}", content from "{summary}", and images from "{image_folder}". Do not submit it.Markdownを記事下書きに変換
Convert "{markdown_file}" into a WeChat article draft using the "grace" theme. Insert referenced images and save the result as a draft.レビュー済みキャンペーン投稿を準備
Review "{markdown_file}" and "{image_folder}" for missing assets, then create a WeChat draft. Tell me what was shortened or changed before saving.制御された公開ワークフローを実行
Use the WeChat browser automation only after confirming Chrome is available and I am logged in. Create the draft from "{markdown_file}", keep the browser open, and do not click submit without my approval.ベストプラクティス
- 専用のブラウザプロファイルでワークフローを実行し、送信前に下書きを確認してください。
- 公開中にリモートアセットをダウンロードしないよう、可能な場合はローカル画像ファイルを使用してください。
- 初回実行時は、WeChat、Chrome、クリップボード、アクセシビリティ権限を確認できる状態にしておいてください。
回避
- リモート画像リンクや埋め込み図を確認せずに、信頼できないMarkdownでこのスキルを実行しないでください。
- 法務、ブランド、編集上の承認が必要な投稿に対して、自動送信を許可しないでください。
- 機密性の高いアプリケーションが最前面にある状態で、クリップボード自動化を使用しないでください。
よくある質問
このスキルはWeChatに直接公開しますか？
下書きの作成と保存が可能です。送信はコマンドオプションに依存し、承認前に確認する必要があります。
なぜChromeが必要なのですか？
このスキルは、Chrome自動化とローカルデバッグ接続を通じてWeChat Official AccountのWebインターフェースを制御します。
ログインせずに動作しますか？
いいえ。ユーザーは通常、QRコードをスキャンしてWeChat Official Accountページにログインする必要があります。
システムクリップボードを使用しますか？
はい。一部の記事および画像挿入手順では、リッチHTMLまたは画像をクリップボードにコピーし、エディタに貼り付けます。
Markdown内のリモート画像を処理できますか？
はい。変換スクリプトは、挿入前にリモート画像URLを一時フォルダへダウンロードできます。
自動実行しても安全ですか？
ブラウザを起動し、外部コマンドを実行し、クリップボードを使用し、キーボードイベントを送信するため、注意が必要です。
開発者情報
作成者
JimLiuライセンス
MIT
Skillstore リビジョン
r1
バージョンに関する注意
作者はバージョンを宣言していません。
参照
1ffa7643651792ccb4bd3b15d924d2c97edff755
メンテナンスの新しさ
2026/7/20
利用状況
122 ダウンロード · 302 閲覧