wechat-devtools-mcp

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Overall this skill appears coherent with its stated WeChat development purpose, but it carries medium security risk from third-party installation paths and explicit transitive skill installation. I would classify it as SUSPICIOUS rather than benign until the package/repo publisher relationship and official distribution path are verified.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 13, 2026, 10:06 AM
Package URL
pkg:socket/skills-sh/Aradotso%2Fdevtools-skills%2Fwechat-devtools-mcp%2F@8dff4b558c5619a0c20922209a5610b056a3d31738b90a2feda8cb7b1f95aefd
Security Audit — socket — wechat-devtools-mcp