Skill audit report
wechat-formatter Audit report.
把 Markdown 文稿转换成微信公众号可用的内联样式 HTML。**触发场景**:用户说 "把 markdown 转成公众号能用的 HTML" / "排版一下这篇文章" / "套个主题" / "微信编辑器不识别我的样式" / 任何提到「公众号排版 / 微信 HTML / md 转 html / doocs 主题」的请求。微信编辑器不识别 `<style>` 标签,必须把所有 CSS 内联到每个 HTML 元素的 style 属性里——本 skill 用 doocs/md 主题完成这件事。本 skill 只负责格式转换;写作交给 wechat-writer,发布交给 wechat-publisher。
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
WARN48
84 GitHub stars
Stars/forks activity
WARN43
84 stars, 0 forks; issue activity unavailable in current metadata
Recent maintenance
PASS88
2mo since push
License clarity
PASS86
MIT
README/SKILL.md completeness
INFO76
Public metadata needs stronger README/SKILL.md context
Dependency/runtime risk
WARN54
command execution surface, credential or environment access
Install availability
PASS92
npx skills add YiShu5/claude-skills --skill wechat-formatter
Install command safety
PASS92
standard package or runtime install path
Permission surface
WARN50
secrets or environment access, shell or command execution
Repository evidence
PASS86
https://github.com/YiShu5/claude-skills/tree/master/skills/wechat-formatter
Review status
INFO66
AI review data available
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add YiShu5/claude-skills --skill wechat-formatter
Repository
88
https://github.com/YiShu5/claude-skills/tree/master/skills/wechat-formatter
License
86
MIT
Maintenance
88
2mo since push
AI review
55
SKILL.md claims to directly call doocs/md, but the provided script appears to be a custom converter with its own themes, which may confuse users expecting an external dependency.
README/SKILL.md completeness
84
Usable description available
Dependency risk
54
command execution surface, credential or environment access
Install command safety
92
standard package or runtime install path
Permission surface
50
secrets or environment access, shell or command execution
Stars/forks activity
43
84 stars, 0 forks; issue activity unavailable in current metadata
Adoption
68
84 GitHub stars
Warnings
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- SKILL.md claims to directly call doocs/md, but the provided script appears to be a custom converter with its own themes, which may confuse users expecting an external dependency.
- The script excerpt is incomplete; ensure the full script is present and functional in the repository.
- Quality score needs review
- Permission surface needs review: secrets or environment access, shell or command execution
- GitHub adoption: 84 GitHub stars
- Stars/forks activity: 84 stars, 0 forks; issue activity unavailable in current metadata
- Dependency/runtime risk: command execution surface, credential or environment access
- Permission surface: secrets or environment access, shell or command execution
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Compare nearby options
Related skills to audit next
Humanizer
Rewrites AI-sounding text so it reads naturally while preserving every factual claim and matching the writer's voice.
58K Stars · Audit report
stop-slop
Eliminates predictable AI writing patterns from prose while preserving specific meaning and reader trust.
16K Stars · Audit report
unslop
Applies Cursor's prose-discipline rules to remove filler and AI writing tells from agent-facing and user-facing text.
4.8K Stars · Audit report