wechat-publisher 安全扫描报告 — 低风险 | ClawSafe

22 /100

wechat-publisher

微信公众号发布技能 - 自动发布 AI 新闻到微信公众号草稿箱

Legitimate WeChat publishing skill with exposed example credentials in documentation (likely test/dev credentials, not actual malicious infrastructure). No code execution, credential theft, or data exfiltration patterns detected.

技能名称wechat-publisher

分析耗时54.9s

引擎pi

✓

可以安装

Replace hardcoded example credentials in documentation with placeholder text. Consider removing real-looking test credentials from docs. The skill itself is safe but documentation hygiene needs improvement.

安全发现 2 项

严重性	安全发现	位置
中危	Exposed credentials in documentation 文档欺骗 Multiple documentation files contain what appear to be real WeChat AppID (wxebff9eadface1489) and AppSecret (44c10204ceb1bfb3f7ac096754976454) as examples. These look like test/dev credentials and are exposed across install-guide.md, troubleshooting.md, user_guide.md, and skill.md. `AppID: wxebff9eadface1489 AppSecret: 44c10204ceb1bfb3f7ac096754976454` → Replace with clearly marked placeholders like YOUR_APP_ID and YOUR_APP_SECRET	`docs/install-guide.md:111`
低危	Hardcoded example IP address 文档欺骗 IP address 123.45.67.89 appears as an example in install-guide.md:151. This appears to be documentation placeholder rather than actual C2 infrastructure. `"query": "123.45.67.89"` → Replace with a clearly fictional IP or generic placeholder text	`docs/install-guide.md:151`

资源类型	声明权限	推断权限	状态	证据
文件系统	`WRITE`	`WRITE`	✓ 一致	Creates memory/, templates/, reads config/default.json
网络访问	`READ`	`WRITE`	✓ 一致	Makes API calls to api.weixin.qq.com for publishing
命令执行	`NONE`	`NONE`	—	No subprocess or shell execution found
环境变量	`NONE`	`READ`	✓ 一致	Only reads WECHAT_APP_SECRET, not enumerating all env vars

1 高危 18 项发现

📡

高危 IP 地址硬编码 IP 地址

123.45.67.89

docs/install-guide.md:151

🔗

中危外部 URL 外部 URL

https://mmbiz.qpic.cn/mmbiz_jpg/

docs/block-layout.md:91

🔗

中危外部 URL 外部 URL

https://mp.weixin.qq.com/

docs/install-guide.md:111

🔗

中危外部 URL 外部 URL

http://ip-api.com/json/

docs/install-guide.md:142

🔗

中危外部 URL 外部 URL

https://clawhub.com/skill/wechat-publisher

docs/install-guide.md:382

🔗

中危外部 URL 外部 URL

https://ip-api.com/

docs/troubleshooting.md:46

🔗

中危外部 URL 外部 URL

https://api.weixin.qq.com/

docs/troubleshooting.md:296

🔗

中危外部 URL 外部 URL

https://docs.openclaw.ai

docs/troubleshooting.md:390

🔗

中危外部 URL 外部 URL

https://deb.nodesource.com/setup_16.x

docs/user_guide.md:101

🔗

中危外部 URL 外部 URL

https://clawhub.com

docs/user_guide.md:144

🔗

中危外部 URL 外部 URL

https://mp.weixin.qq.com

docs/user_guide.md:179

🔗

中危外部 URL 外部 URL

https://registry.npmmirror.com

docs/user_guide.md:447

🔗

中危外部 URL 外部 URL

https://discord.gg/clawd

docs/user_guide.md:526

🔗

中危外部 URL 外部 URL

https://api.weixin.qq.com/cgi-bin/token

scripts/publish.py:146

🔗

中危外部 URL 外部 URL

https://api.weixin.qq.com/cgi-bin/draft/add

scripts/publish.py:283

📧

提示邮箱邮箱地址

[email protected]

docs/install-guide.md:219

📧

提示邮箱邮箱地址

[email protected]

docs/user_guide.md:527

📧

提示邮箱邮箱地址

[email protected]

skill.md:7

目录结构

12 文件 · 83.8 KB · 3042 行

Markdown 9f · 2547L Python 1f · 414L HTML 1f · 68L JSON 1f · 13L

├─ ▾ 📁 config

│ └─ 📋 default.json JSON 13L · 242 B

├─ ▾ 📁 docs

│ ├─ 📝 block-layout.md Markdown 139L · 3.1 KB

│ ├─ 📝 install-guide.md Markdown 400L · 8.0 KB

│ ├─ 📝 publish-rules.md Markdown 188L · 4.7 KB

│ ├─ 📝 templates.md Markdown 279L · 7.0 KB

│ ├─ 📝 troubleshooting.md Markdown 404L · 9.2 KB

│ ├─ 📝 user_guide.md Markdown 532L · 15.5 KB

│ └─ 📝 user-guide.md Markdown 311L · 6.9 KB

├─ ▾ 📁 scripts

│ └─ 🐍 publish.py Python 414L · 16.6 KB

├─ ▾ 📁 templates

│ └─ 📄 v5-simple.html HTML 68L · 4.5 KB

├─ 📝 changelog.md Markdown 80L · 2.2 KB

└─ 📝 skill.md Markdown 214L · 5.9 KB

依赖分析 1 项

包名	版本	来源	已知漏洞	备注
`requests`	`*`	pip	否	Version not pinned but widely-used library

安全亮点

✓ No subprocess or shell execution found in code

✓ No base64 encoding or obfuscation detected

✓ No credential harvesting (doesn't iterate through all environment variables)

✓ No data exfiltration or C2 communication

✓ No reverse shell or remote code execution

✓ No persistence mechanisms (no cron/scheduled tasks in code)

✓ No prompt injection or hidden instructions

✓ Uses legitimate WeChat official APIs

✓ Dependencies are standard (requests library only)

✓ No malicious supply chain indicators