Навыки wechat-mp-article-extract

📦

wechat-mp-article-extract

Name: wechat-mp-article-extract
Author: devinchen2014

Ревизия содержимого r1 Безопасно ⚙️ Внешние команды🌐 Доступ к сети🔑 Переменные окружения

Extract WeChat Articles into Structured Notes

WeChat article links can be difficult to organize for research and editorial work. This skill uses SocialDataX to organize returned article text, metadata, and media links.

Поддерживает: Claude Codex Code(CC)

📊 72 Адекватно

Maintain this Skill? Claim it 📊 72 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "wechat-mp-article-extract" from https://skillstore.io/skills/devinchen2014-wechat-mp-article-extract.md and its manifest at https://skillstore.io/api/skills/devinchen2014-wechat-mp-article-extract/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/devinchen2014-wechat-mp-article-extract.md Подписанный manifest GET /api/skills/devinchen2014-wechat-mp-article-extract/manifest Подписанный lockfile GET /api/skills/devinchen2014-wechat-mp-article-extract/lockfile

Протестировать

Использование «wechat-mp-article-extract». Illustrative request: extract a supported article whose response includes a title and body but no media.

Ожидаемый результат:

Article information: title, account, publication time, and original URL appear when returned.
Body: returned paragraphs appear in their original order.
Images and media: not returned.
Related articles: not returned.

Использование «wechat-mp-article-extract». Illustrative request: extract an article when SocialDataX reports insufficient balance.

Ожидаемый результат:

Article extraction could not finish because the service reported insufficient balance.
Billing page: https://socialdatax.com/dashboard/billing
No repeated retries were made. Extraction can resume after the balance issue is resolved.

Аудит безопасности

Безопасно

v1 • 02.11.2026 Открыть версионный отчет

One command finding is confirmed: the documented CLI downloads and executes an unpinned npm package through npx without an installation prompt. The other 25 findings concern Markdown syntax, legitimate service links, credential variable names, and readable Chinese text. No evidence found of prompt injection or credential exfiltration in the supplied files; the external package implementation was not available for review.

Просканировано файлов

100

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Пункты проверки возможностей (1)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Средний

SKILL.md:31-35

Ruby/shell backtick execution

```bash

Although the delimiter is Markdown, the enclosed command runs npx -y socialdatax-skills@latest, downloading and executing a mutable external package. This creates supply-chain exposure without an installation prompt; the package implementation is not bundled for inspection.

Факторы риска

⚙️ Внешние команды (15)

SKILL.md:9 SKILL.md:25 SKILL.md:31-35 SKILL.md:35-37 SKILL.md:37-42 SKILL.md:42-43 SKILL.md:43-44 SKILL.md:44-66 SKILL.md:66-68 SKILL.md:68-72 SKILL.md:72-81 SKILL.md:81-82 SKILL.md:82-83 SKILL.md:83-89 SKILL.md:89

🌐 Доступ к сети (3)

SKILL.md:7 SKILL.md:25 SKILL.md:82

🔑 Переменные окружения (6)

SKILL.md:7 SKILL.md:25 SKILL.md:72 SKILL.md:81 SKILL.md:83 SKILL.md:89

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/devinchen2014-wechat-mp-article-extract/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/devinchen2014-wechat-mp-article-extract/security.svg)](https://skillstore.io/skills/devinchen2014-wechat-mp-article-extract?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/devinchen2014-wechat-mp-article-extract?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/devinchen2014-wechat-mp-article-extract/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/devinchen2014-wechat-mp-article-extract.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

devinchen2014. (2026). wechat-mp-article-extract security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/devinchen2014-wechat-mp-article-extract/audits/1

Цитата BibTeX

@techreport{devinchen2014-devinchen2014-wechat-mp-article-extract-2026,
  author = {devinchen2014},
  title = {wechat-mp-article-extract security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/devinchen2014-wechat-mp-article-extract/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "wechat-mp-article-extract security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "devinchen2014"
date-released: "2026-11-02"
url: "https://skillstore.io/skills/devinchen2014-wechat-mp-article-extract/audits/1"
identifiers:
  - type: other
    value: "skillstore:devinchen2014-wechat-mp-article-extract:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Prepare source notes

Turn a supplied WeChat article into organized source text, publication metadata, and related links for later analysis.

Review article assets

Separate returned article paragraphs, image links, and embedded video cards for an editorial review.

Build a reference record

Create a consistent article record with the original URL and explicit notices for unavailable fields.

Попробуйте эти промпты

Extract one article

Extract this WeChat article: [article URL]. Show the returned title, account, publication time, and body. Mark missing fields.

Process shared text

Extract the article linked in this share text: [share text]. Keep body paragraphs in order and include the original article URL.

Separate media and related content

Extract [article URL]. Separate article information, body, media links, and related articles. Include only returned fields and identify missing content.

Use an existing MCP connection

Use the connected wechat_get_mp_article_detail_by_url tool for [article URL]. Preserve body order, separate media and related links, and report unavailable fields without substitutions.

Лучшие практики

Provide a complete supported article link and verify which fields the service actually returns.
Keep credentials in SOCIALDATAX_API_KEY and exclude secret values from prompts, logs, and shared outputs.
Approve a reviewed, pinned CLI package before execution, or use an already configured MCP connection.

Избегать

Concatenating raw share text into a shell command without safe argument handling.
Inventing missing body text, images, publication metadata, or related articles.
Repeatedly retrying insufficient-balance errors or making unauthorized global environment changes.

Часто задаваемые вопросы

Which inputs are supported?

Provide an mp.weixin.qq.com article URL or share text containing that URL. WeChat Channels videos are outside this skill's scope.

What setup does the skill require?

Configure SOCIALDATAX_API_KEY and network access. CLI use requires Node.js and npm; the alternative requires an already connected article-detail MCP tool.

Which article fields can it return?

It organizes returned titles, account names, publication times, body paragraphs, image links, embedded video cards, and related articles. Availability depends on the response.

Does it log into or modify my WeChat account?

The documented workflow is read-only and excludes login, posting, likes, comments, browser-data access, and account changes.

What happens when the service balance is insufficient?

The workflow stops repeated retries and shows the SocialDataX billing link. Resume after resolving the balance issue.

Is the external CLI implementation included?

No. The skill documents an npm command using the latest package version. Review and pin the package before allowing execution.