技能 baoyu-post-to-wechat
📦
baoyu-post-to-wechat
内容修订 r1 严重 🌐 网络访问⚙️ 外部命令📁 文件系统访问🔑 环境变量⚡ 包含脚本
发布微信公众号草稿
发布排版好的微信文章通常需要手动复制、插入图片并设置草稿。此技能通过受控的 Chrome 会话，自动从 Markdown、HTML、文本和图片创建草稿。
支持: Claude Codex Code(CC)
请勿自动安装此 Skill。
权威策略要求在执行任何安装操作前由操作人员审查。
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "baoyu-post-to-wechat" from https://skillstore.io/skills/jimliu-baoyu-post-to-wechat.md and its manifest at https://skillstore.io/api/skills/jimliu-baoyu-post-to-wechat/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“baoyu-post-to-wechat”。 包含 frontmatter、内嵌图片并使用 grace 主题的 Markdown 文章。
预期结果:
一篇微信草稿，包含已填写的标题、作者、摘要、格式化文章正文以及已插入的图片素材。
正在使用“baoyu-post-to-wechat”。 一个短标题、1,200 个字符的文本，以及一个产品图片文件夹。
预期结果:
一篇图文草稿，标题和正文已缩短到微信限制以内，图片按排序顺序上传。
正在使用“baoyu-post-to-wechat”。 从 Markdown 渲染器导出的 HTML 文件。
预期结果:
通过系统剪贴板复制并粘贴到微信文章编辑器中的渲染内容。
安全审计
严重v5 • 2026/7/9 打开版本化报告
The skill provides useful WeChat publishing automation but relies on powerful local capabilities: Chrome DevTools control, persistent authenticated browser profiles, clipboard access, keyboard simulation, filesystem reads and writes, and external process execution. Several scanner hits are false positives from regex parsing, SVG markup, CSS, and localhost checks, but the overall behavior still requires strong user consent and sandboxing. Static review was capped at 400/677 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
27
已扫描文件
5,854
分析行数
111
复核项
0
已忽略误报
已确认安全问题 (15)
严重
Keylogger keywords
console.log(`Send real paste keystroke (Cmd+V / Ctrl+V) to the frontmost application
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
严重
Keylogger keywords
// Build script that activates app (if specified) and sends keystroke in one atomic operation
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
严重
Keylogger keywords
keystroke "v" using command down
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
严重
Keylogger keywords
keystroke "v" using command down
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
严重
Keylogger keywords
console.log(`[paste] Sending paste keystroke (retries=${retries}, delay=${delayMs}ms)...`);
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
严重
Keylogger keywords
console.log('[paste] Paste keystroke sent successfully');
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
严重
Keylogger keywords
console.error('[paste] Failed to send paste keystroke');
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
严重
Keylogger keywords
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "c" using command down'
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
显示全部 15 条已确认问题
严重
Keylogger keywords
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "v" using command down'
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
严重
Keylogger keywords
| `scripts/paste-from-clipboard.ts` | Send real paste keystroke |
The skill intentionally sends copy or paste keyboard shortcuts to the frontmost application. This is legitimate for the workflow but is high-risk UI automation because it can affect the wrong window.
严重
[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
This combination is common in credential stealers and RATs
The code combines browser automation, local command execution, filesystem access, network access, and persisted browser profiles. That combination can publish content or access authenticated browser state if misused.
高
scripts/wechat-agent-browser.ts:13-17scripts/wechat-agent-browser.ts:184-195scripts/wechat-agent-browser.ts:215-217
Shell Command Injection Risk in Browser Helper
The helper builds a shell command string for agent-browser and runs it with execSync. Later calls interpolate post title, content, selector, and image data into that command path, which can allow command injection or unintended browser actions if inputs contain shell metacharacters.
execSync receives a constructed shell string, and reviewed call sites interpolate workflow-controlled strings. The exact exploitability depends on inputs, but the pattern is strong.
高
Authenticated Browser Session Automation
The skill launches Chrome with a persistent user data directory and controls an authenticated WeChat session over CDP. A compromised or misused workflow could operate inside the user account, save drafts, upload files, or interact with the editor without normal manual safeguards.
The reviewed files explicitly launch Chrome, persist a profile, connect via CDP, and wait for WeChat login. This confirms account-level browser automation intent.
中
scripts/md-to-wechat.ts:73-83scripts/md/extensions/plantuml.ts:142-145scripts/md/extensions/plantuml.ts:191-199
Remote Markdown Assets and Diagram Rendering
Markdown conversion can download remote image URLs and PlantUML rendering can send encoded diagram text to an external PlantUML server. This may disclose source content or asset URLs during article preparation.
The code directly downloads http or https images and constructs PlantUML server URLs from diagram content. This is legitimate functionality but creates clear data disclosure risk.
低
Base64 encode
const base64 = btoa(String.fromCharCode(...utf8Bytes))
Base64-style encoding is used for PlantUML diagram URLs, not malware obfuscation. It is kept as a low-confidence confirmed transformation because it sends encoded user diagram text to a server.
能力复核项 (111)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
高
Node.js child_process module
import { spawn } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
高
Node.js child_process module
import { spawn } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
高
Node.js child_process module
import { spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
高
Node.js child_process module
import { spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
高
Node.js child_process module
import { execSync, spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
高
Node.js child_process module
import { spawnSync } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
高
Node.js child_process module
import { spawn } from 'node:child_process';
The file imports child_process to launch Chrome, npx, clipboard tools, or browser helpers. External command execution is central to the workflow and increases local system risk.
高
PowerShell invocation
await runCommand('powershell.exe', ['-NoProfile', '-Sta', '-Command', ps, '-Path', imagePath]);
PowerShell is used to manipulate the Windows clipboard or send paste actions. This is expected behavior, but it can affect system state outside the skill sandbox.
高
PowerShell invocation
await runCommand('powershell.exe', ['-NoProfile', '-Sta', '-Command', ps, '-Path', htmlFilePath]);
PowerShell is used to manipulate the Windows clipboard or send paste actions. This is expected behavior, but it can affect system state outside the skill sandbox.
高
PowerShell invocation
const result = spawnSync('powershell.exe', ['-NoProfile', '-Command', ps], { stdio: 'pipe' });
PowerShell is used to manipulate the Windows clipboard or send paste actions. This is expected behavior, but it can affect system state outside the skill sandbox.
高
Process spawn
const chrome = spawn(chromePath, [
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
高
Process spawn
const child = spawn(command, args, { stdio: ['pipe', 'pipe', 'pipe'] });
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
高
Process spawn
const child = spawn(command, args, { stdio: ['pipe', 'pipe', 'pipe'] });
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
高
Process spawn
const chrome = spawn(chromePath, [
The process spawn launches local programs such as Chrome, clipboard helpers, or system tools. These calls are real external command execution and should require user awareness.
高
Synchronous process execution
const result = execSync(fullCmd, { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] });
execSync builds and runs an agent-browser shell command. Shell-based synchronous execution is risky, especially when command text includes workflow-controlled values.
高
Synchronous spawn
const result = spawnSync('npx', ['-y', 'bun', renderScript, tempMdPath, '--theme', theme], {
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const result = spawnSync('osascript', ['-e', script], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const result = spawnSync('osascript', ['-e', script], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const which = spawnSync('which', [tool.cmd], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const result = spawnSync(tool.cmd, tool.args, { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const result = spawnSync('powershell.exe', ['-NoProfile', '-Command', ps], { stdio: 'pipe' });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const result = spawnSync('agent-browser', ['--session', SESSION, ...args], {
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const result = spawnSync('npx', ['-y', 'bun', copyScript, 'image', imagePath], { stdio: 'inherit' })
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "c" using command down'
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
spawnSync('xdotool', ['key', 'ctrl+c']);
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
spawnSync('osascript', ['-e', 'tell application "System Events" to keystroke "v" using command down'
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
spawnSync('xdotool', ['key', 'ctrl+v']);
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
高
Synchronous spawn
const result = spawnSync('npx', args, { stdio: ['inherit', 'pipe', 'pipe'] });
The synchronous spawn runs local automation tools such as osascript, xdotool, npx, bun, or agent-browser. These commands can alter browser or clipboard state.
中
Dynamic import() expression
const { Infographic, setDefaultFont, setFontExtendFactor, exportToSVG } = await import('@antv/infogr
Dynamic import is used for optional rendering or syntax highlighting modules. One path can load language modules from a CDN, which is a supply-chain and remote-code risk.
中
Dynamic import() expression
const mermaid = await import("mermaid");
Dynamic import is used for optional rendering or syntax highlighting modules. One path can load language modules from a CDN, which is a supply-chain and remote-code risk.
中
Dynamic import() expression
const module = await import(/* @vite-ignore */ grammarUrlFor(language))
Dynamic import is used for optional rendering or syntax highlighting modules. One path can load language modules from a CDN, which is a supply-chain and remote-code risk.
中
File stream creation
fs.createReadStream(filePath).on('error', reject).pipe(child.stdin);
The code streams local files or downloaded content as part of clipboard and rendering operations. This is expected, but it handles user-selected file data.
中
File stream creation
const file = fs.createWriteStream(destPath);
The code streams local files or downloaded content as part of clipboard and rendering operations. This is expected, but it handles user-selected file data.
中
innerHTML assignment (XSS risk)
container.innerHTML = `<div style="color: red; padding: 10px; border: 1px solid red;">Infographic 渲染
The renderer writes generated HTML into the DOM. If untrusted Markdown or remote highlighting output reaches this path, it can create an XSS-style rendering risk.
中
innerHTML assignment (XSS risk)
codeBlock.innerHTML = highlighted
The renderer writes generated HTML into the DOM. If untrusted Markdown or remote highlighting output reaches this path, it can create an XSS-style rendering risk.
中
Node.js fs operations
fs.unlinkSync(destPath);
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
fs.unlinkSync(destPath);
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
fs.unlink(destPath, () => {});
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
const content = fs.readFileSync(markdownPath, 'utf-8');
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
baseCss: fs.readFileSync(basePath, "utf-8"),
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
themeCss: fs.readFileSync(themePath, "utf-8"),
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
const markdown = fs.readFileSync(inputPath, "utf-8");
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
fs.renameSync(outputPath, backupPath);
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
fs.writeFileSync(outputPath, html, "utf-8");
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
const content = fs.readFileSync(htmlPath, 'utf-8');
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
Node.js fs operations
const text = fs.readFileSync(filePath, 'utf-8');
The skill reads and writes local Markdown, HTML, image, and temporary files. This is required for publishing but exposes local file handling risk.
中
outerHTML assignment (XSS risk)
placeholderElement.outerHTML = createPlantUMLHTML(imageUrl, options, svgContent)
The PlantUML renderer can replace DOM content with SVG fetched from a remote server. Injecting remote SVG into outerHTML is a real content injection risk.
中
Synchronous file operations
const content = fs.readFileSync(markdownPath, 'utf-8');
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
中
Synchronous file operations
baseCss: fs.readFileSync(basePath, "utf-8"),
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
中
Synchronous file operations
themeCss: fs.readFileSync(themePath, "utf-8"),
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
中
Synchronous file operations
const markdown = fs.readFileSync(inputPath, "utf-8");
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
中
Synchronous file operations
fs.writeFileSync(outputPath, html, "utf-8");
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
中
Synchronous file operations
const content = fs.readFileSync(htmlPath, 'utf-8');
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
中
Synchronous file operations
const text = fs.readFileSync(filePath, 'utf-8');
Synchronous filesystem reads and writes process article and rendered output files. This is expected but can read or overwrite user-selected paths.
中
Temp directory access
const tempDir = await mkdtemp(path.join(os.tmpdir(), prefix));
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
中
Temp directory access
const tempDir = options?.tempDir ?? path.join(os.tmpdir(), 'wechat-article-images');
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
中
Temp directory access
"htmlPath": "/tmp/wechat-article-images/temp-article.html",
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
中
Temp directory access
"localPath": "/tmp/wechat-article-images/img.png",
The skill creates temporary directories and files for clipboard and article image processing. Temporary file handling is legitimate but needs cleanup and path controls.
中
WebSocket connection
const ws = new WebSocket(url);
The code connects to Chrome DevTools Protocol over WebSocket. This grants browser automation capability in an authenticated WeChat session.
中
WebSocket connection
const ws = new WebSocket(url);
The code connects to Chrome DevTools Protocol over WebSocket. This grants browser automation capability in an authenticated WeChat session.
低
Environment variable access (dot notation)
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
低
Environment variable access (dot notation)
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
低
Environment variable access (dot notation)
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
低
Environment variable access (dot notation)
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads environment variables for browser path or profile location. This appears to be configuration, but environment access is still relevant for audit visibility.
低
Environment variable object
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
低
Environment variable object
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
低
Environment variable object
const override = process.env.WECHAT_BROWSER_CHROME_PATH?.trim();
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
低
Environment variable object
const base = process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local', 'share');
The code reads process.env for browser path or data directory configuration. This is low-risk configuration access rather than credential harvesting.
低
Fetch API call
const res = await fetch(url, { redirect: 'follow' });
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
低
Fetch API call
const response = await fetch(svgUrl)
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
低
Fetch API call
fetch('file://${img}').then(r => r.blob()).then(b => {
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
低
Fetch API call
const res = await fetch(url, { redirect: 'follow' });
Network fetch is used for Chrome debugging endpoints, PlantUML SVG retrieval, or browser-helper logic. Network calls are real and may contact local or external services.
低
Hardcoded URL
[Link text](https://example.com)
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
const version = await fetchJson<{ webSocketDebuggerUrl?: string }>(`http://127.0.0.1:${port}/json/ve
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
* https://github.com/bent10/marked-extensions/tree/main/packages/alert
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
* A [marked](https://marked.js.org/) extension to support [GFM alerts](https://github.com/orgs/commu
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
// 行内公式对齐 https://groups.google.com/g/mathjax-users/c/zThKffrrCvE?pli=1
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
* @default 'https://www.plantuml.com/plantuml'
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
* 基于官方文档 https://plantuml.com/text-encoding
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
* 基于官方文档 https://plantuml.com/text-encoding
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
* 基于官方文档 https://plantuml.com/text-encoding
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
serverUrl: options.serverUrl || `https://www.plantuml.com/plantuml`,
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
* https://talk.commonmark.org/t/proper-ruby-text-rb-syntax-support-in-markdown/2279
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
Original project: https://github.com/doocs/md
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
const HLJS_CDN_BASE = `https://cdn-doocs.oss-cn-shenzhen.aliyuncs.com/npm/highlightjs/${HLJS_VERSION
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
const WECHAT_URL = 'https://mp.weixin.qq.com/';
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
const WECHAT_URL = 'https://mp.weixin.qq.com/';
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
const WECHAT_URL = 'https://mp.weixin.qq.com/';
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Hardcoded URL
const version = await fetchJson<{ webSocketDebuggerUrl?: string }>(`http://127.0.0.1:${port}/json/ve
The skill contains fixed WeChat, CDN, PlantUML, or documentation URLs. These network destinations are expected but should be transparent to users.
低
Node.js fs stat operations
if (override && fs.existsSync(override)) return override;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (fs.existsSync(p)) return p;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(imagePath)) throw new Error(`File not found: ${imagePath}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(htmlFilePath)) throw new Error(`File not found: ${htmlFilePath}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(localPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(htmlPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(markdownPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(basePath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(themePath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(inputPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (fs.existsSync(outputPath)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(img)) throw new Error(`Image not found: ${img}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
} else if (htmlFile && fs.existsSync(htmlFile)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (effectiveHtmlFile && fs.existsSync(effectiveHtmlFile)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (fs.existsSync(img)) {
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (override && fs.existsSync(override)) return override;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (fs.existsSync(p)) return p;
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(absPath)) throw new Error(`Markdown file not found: ${absPath}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(absDir)) throw new Error(`Images directory not found: ${absDir}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Node.js fs stat operations
if (!fs.existsSync(img)) throw new Error(`Image not found: ${img}`);
The code checks whether user-provided files, images, or browser paths exist. This is expected filesystem metadata access and should remain visible to users.
低
Temp file creation
import { mkdtemp, rm, writeFile } from 'node:fs/promises';
Temporary files are created for clipboard and rendered HTML workflows. This is expected but relevant because generated content may contain user data.
低
Temp file creation
const tempDir = await mkdtemp(path.join(os.tmpdir(), prefix));
Temporary files are created for clipboard and rendered HTML workflows. This is expected but relevant because generated content may contain user data.
风险因素
🌐 网络访问 (49)
references/article-posting.md:51 scripts/cdp.ts:69 scripts/cdp.ts:132 scripts/cdp.ts:15 scripts/cdp.ts:80 scripts/cdp.ts:18 scripts/cdp.ts:80 scripts/md/extensions/alert.ts:21 scripts/md/extensions/alert.ts:23 scripts/md/extensions/alert.ts:153 scripts/md/extensions/alert.ts:157 scripts/md/extensions/alert.ts:165 scripts/md/extensions/alert.ts:171 scripts/md/extensions/alert.ts:176 scripts/md/extensions/alert.ts:181 scripts/md/extensions/alert.ts:186 scripts/md/extensions/alert.ts:191 scripts/md/extensions/alert.ts:196 scripts/md/extensions/alert.ts:201 scripts/md/extensions/alert.ts:206 scripts/md/extensions/alert.ts:211 scripts/md/extensions/alert.ts:216 scripts/md/extensions/alert.ts:221 scripts/md/extensions/alert.ts:226 scripts/md/extensions/alert.ts:231 scripts/md/extensions/alert.ts:236 scripts/md/extensions/alert.ts:241 scripts/md/extensions/alert.ts:251 scripts/md/extensions/alert.ts:256 scripts/md/extensions/katex.ts:26 scripts/md/extensions/plantuml.ts:193 scripts/md/extensions/plantuml.ts:7 scripts/md/extensions/plantuml.ts:35 scripts/md/extensions/plantuml.ts:61 scripts/md/extensions/plantuml.ts:78 scripts/md/extensions/plantuml.ts:241 scripts/md/extensions/ruby.ts:5 scripts/md/LICENSE:3 scripts/md/utils/languages.ts:80 scripts/wechat-agent-browser.ts:195 scripts/wechat-agent-browser.ts:6 scripts/wechat-article.ts:7 scripts/wechat-browser.ts:178 scripts/wechat-browser.ts:241 scripts/wechat-browser.ts:113 scripts/wechat-browser.ts:9 scripts/wechat-browser.ts:189 scripts/wechat-browser.ts:116 scripts/wechat-browser.ts:189
⚙️ 外部命令 (50)
scripts/cdp.ts:1 scripts/cdp.ts:184 scripts/cdp.ts:70 scripts/cdp.ts:80 scripts/cdp.ts:89 scripts/cdp.ts:155 scripts/cdp.ts:182 scripts/cdp.ts:185 scripts/cdp.ts:186 scripts/cdp.ts:204 scripts/cdp.ts:223 scripts/cdp.ts:228-236 scripts/cdp.ts:240 scripts/copy-to-clipboard.ts:1 scripts/copy-to-clipboard.ts:59 scripts/copy-to-clipboard.ts:96 scripts/copy-to-clipboard.ts:11-26 scripts/copy-to-clipboard.ts:79 scripts/copy-to-clipboard.ts:108 scripts/copy-to-clipboard.ts:129-186 scripts/copy-to-clipboard.ts:215 scripts/copy-to-clipboard.ts:227 scripts/copy-to-clipboard.ts:257 scripts/copy-to-clipboard.ts:260 scripts/copy-to-clipboard.ts:273 scripts/copy-to-clipboard.ts:279 scripts/copy-to-clipboard.ts:292 scripts/copy-to-clipboard.ts:327 scripts/copy-to-clipboard.ts:372 scripts/copy-to-clipboard.ts:377 scripts/copy-to-clipboard.ts:239 scripts/copy-to-clipboard.ts:249 scripts/md-to-wechat.ts:8 scripts/md-to-wechat.ts:178 scripts/md-to-wechat.ts:44 scripts/md-to-wechat.ts:77 scripts/md-to-wechat.ts:80 scripts/md-to-wechat.ts:151 scripts/md-to-wechat.ts:164-169 scripts/md-to-wechat.ts:169 scripts/md-to-wechat.ts:177-185 scripts/md-to-wechat.ts:185-190 scripts/md-to-wechat.ts:190-213 scripts/md-to-wechat.ts:239-270 scripts/md-to-wechat.ts:270-279 scripts/md/extensions/alert.ts:116 scripts/md/extensions/alert.ts:26 scripts/md/extensions/alert.ts:36 scripts/md/extensions/alert.ts:47 scripts/md/extensions/alert.ts:48
📁 文件系统访问 (50)
scripts/cdp.ts:35 scripts/cdp.ts:58 scripts/copy-to-clipboard.ts:260 scripts/copy-to-clipboard.ts:279 scripts/copy-to-clipboard.ts:115 scripts/copy-to-clipboard.ts:120 scripts/copy-to-clipboard.ts:3 scripts/copy-to-clipboard.ts:120 scripts/md-to-wechat.ts:35 scripts/md-to-wechat.ts:43 scripts/md-to-wechat.ts:57 scripts/md-to-wechat.ts:118 scripts/md-to-wechat.ts:79 scripts/md-to-wechat.ts:189 scripts/md-to-wechat.ts:269 scripts/md-to-wechat.ts:118 scripts/md-to-wechat.ts:28 scripts/md-to-wechat.ts:145 scripts/md-to-wechat.ts:120 scripts/md-to-wechat.ts:226 scripts/md-to-wechat.ts:230 scripts/md/extensions/alert.ts:116 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/toc.ts:34 scripts/md/render.ts:557 scripts/md/render.ts:558 scripts/md/render.ts:628 scripts/md/render.ts:643 scripts/md/render.ts:646 scripts/md/render.ts:548 scripts/md/render.ts:552 scripts/md/render.ts:616 scripts/md/render.ts:641 scripts/md/render.ts:557 scripts/md/render.ts:558 scripts/md/render.ts:628 scripts/md/render.ts:646 scripts/md/render.ts:181 scripts/md/render.ts:343 scripts/wechat-agent-browser.ts:98 scripts/wechat-article.ts:149 scripts/wechat-article.ts:236 scripts/wechat-article.ts:300 scripts/wechat-article.ts:338 scripts/wechat-article.ts:149 scripts/wechat-browser.ts:18 scripts/wechat-browser.ts:133 scripts/wechat-browser.ts:167 scripts/wechat-browser.ts:298
🔑 环境变量 (8)
⚡ 包含脚本 (16)
scripts/md/extensions/alert.ts:116 scripts/md/extensions/infographic.ts:12 scripts/md/extensions/infographic.ts:77 scripts/md/extensions/infographic.ts:94 scripts/md/extensions/markup.ts:21 scripts/md/extensions/markup.ts:45 scripts/md/extensions/markup.ts:71 scripts/md/extensions/plantuml.ts:170 scripts/md/extensions/plantuml.ts:266 scripts/md/extensions/ruby.ts:31 scripts/md/extensions/ruby.ts:44 scripts/md/extensions/toc.ts:34 scripts/md/render.ts:268 scripts/md/utils/languages.ts:112 scripts/md/utils/languages.ts:202 scripts/paste-from-clipboard.ts:32
检测到的模式
Keylogger keywords×10[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
审计者: claude 查看审计历史 →
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/jimliu-baoyu-post-to-wechat?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/jimliu-baoyu-post-to-wechat?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/jimliu-baoyu-post-to-wechat/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/jimliu-baoyu-post-to-wechat.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
JimLiu. (2026). baoyu-post-to-wechat security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5BibTeX 引用
@techreport{jimliu-jimliu-baoyu-post-to-wechat-2026,
author = {JimLiu},
title = {baoyu-post-to-wechat security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "baoyu-post-to-wechat security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "JimLiu"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/jimliu-baoyu-post-to-wechat/audits/5"
identifiers:
- type: other
value: "skillstore:jimliu-baoyu-post-to-wechat:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 64
架构
85
可维护性
85
内容
72
社区
83
规范符合性
你能构建什么
发布排版文章草稿
将 Markdown 文章转换为微信编辑器内容，包含标题、作者、摘要和内嵌图片。
创建图文更新
准备一篇微信短内容，包含压缩后的标题、简洁正文以及一组本地图片。
自动化重复发布步骤
在审核源文件和图片素材后，使用 Claude Code 或 Codex 运行发布工作流。
试试这些提示
发布简单图文草稿
Use this skill to create a WeChat image-text draft with title "{title}", content from "{summary}", and images from "{image_folder}". Do not submit it.将 Markdown 转换为文章草稿
Convert "{markdown_file}" into a WeChat article draft using the "grace" theme. Insert referenced images and save the result as a draft.准备经审核的活动文章
Review "{markdown_file}" and "{image_folder}" for missing assets, then create a WeChat draft. Tell me what was shortened or changed before saving.运行受控发布工作流
Use the WeChat browser automation only after confirming Chrome is available and I am logged in. Create the draft from "{markdown_file}", keep the browser open, and do not click submit without my approval.最佳实践
- 在专用浏览器配置文件中运行工作流，并在提交前审核草稿。
- 尽可能使用本地图片文件，以避免在发布过程中下载远程素材。
- 首次运行时，保持微信、Chrome、剪贴板和辅助功能权限可见。
避免
- 不要在未审核远程图片链接和嵌入式图表的情况下，对不受信任的 Markdown 运行此技能。
- 对于需要法务、品牌或编辑审批的文章，不要允许自动提交。
- 当敏感应用位于最前台时，不要使用剪贴板自动化。
常见问题
此技能会直接发布到微信吗？
它可以创建并保存草稿。提交取决于命令选项，并应在批准前进行审核。
为什么需要 Chrome？
此技能通过 Chrome 自动化和本地调试连接来控制微信公众号网页界面。
不登录也能工作吗？
不可以。用户必须登录微信公众号页面，通常需要扫描二维码。
它会使用系统剪贴板吗？
会。有些文章和图片插入步骤会将富 HTML 或图片复制到剪贴板，然后粘贴到编辑器中。
它能处理 Markdown 中的远程图片吗？
可以。转换脚本可以在插入前将远程图片 URL 下载到临时文件夹。
自动运行安全吗？
需要谨慎，因为它会启动浏览器、运行外部命令、使用剪贴板并发送键盘事件。