weixin-article-to-obsidian — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited weixin-article-to-obsidian (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Capture a Weixin Official Account article into an Obsidian vault with local image assets. Prefer opencli weixin download for the initial article fetch, then verify and supplement the result by parsing the page source for picture-page images and article metadata.
Use this skill when the user:
mp.weixin.qq.com article URL![[assets/title/image.png]]Do not use this skill when:
opencli weixin download if available:opencli weixin download --url "https://mp.weixin.qq.com/s/example" --output /tmp/weixin-article --download-images true -f yamlopencli misses images, or if the article is a picture-page article, run the bundled script:python3 scripts/download_weixin_article.py "https://mp.weixin.qq.com/s/example" \
--vault-root /path/to/obsidian-vault \
--target-dir "FrontEnd/security"assets/<note-title>/.scripts/download_weixin_article.py:
opencli weixin download first and reuses its Markdown body when it is complete enoughassets/<safe-title>/--target-diropencli ranImportant options:
--vault-root: Obsidian vault root. Defaults to the current working directory.--target-dir: Relative note directory inside the vault. Defaults to the vault root.--title: Override the extracted title and asset folder name.--locale: Use zh or en metadata labels. Defaults to zh.--overwrite: Replace an existing Markdown note with the same title.assets/<note-title>/, relative to the vault root.rg "mmbiz|data:image|http" <note> only shows the source URL, not remote image links.![[assets/...]].~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.