wechatsync-publisher

Warn

Audited by Socket on Jul 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. 技能目的与“多平台发布”表面一致,但核心数据流不成比例:它把内容和平台认证集中路由到一个未验证归属的明文 HTTP 自建服务器,而不是直接调用官方平台接口。再叠加自动批量发布能力,这更像高风险代理发布网关,而非低信任本地辅助脚本。

Confidence: 91%Severity: 86%
Audit Metadata
Analyzed At
Jul 27, 2026, 01:21 AM
Package URL
pkg:socket/skills-sh/anbeime%2Fskill%2Fwechatsync-publisher%2F@43a35814ff73ca13d30c86e4f4d04314ee479de6b6b47ba47bc067e737540ebb
Security Audit — socket — wechatsync-publisher