wechat-mp-publisher

Warn

Audited by Socket on May 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core WeChat publishing capability matches the stated purpose, but the footprint is broader than necessary because it exports screenshots to a Telegram group, uses persistent cookies, and can drive a real logged-in browser to perform public posting. No strong malware signal appears in the provided text, but the external content-sharing and authenticated browser control create medium risk.

Confidence: 87%Severity: 62%
Audit Metadata
Analyzed At
May 3, 2026, 01:31 PM
Package URL
pkg:socket/skills-sh/aaaaqwq%2Fclaude-code-skills%2Fwechat-mp-publisher%2F@03630375a3b266383e33476b5e5ee56a1f30697f
Security Audit — socket — wechat-mp-publisher