wechat-writer

Warn

Audited by Socket on May 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The writing/archive workflow is largely coherent and local, but it recommends installing a separate third-party SEO helper skill that uses unofficial desktop automation with elevated macOS permissions. That transitive trust and disproportionate permission model make the overall skill medium risk even though there is no clear evidence of credential theft or confirmed malware.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
May 10, 2026, 06:26 AM
Package URL
pkg:socket/skills-sh/DavidLam-oss%2Fwechat-writing-team%2Fwechat-writer%2F@21ad8db03dd07525f60f8968346c3b99d0da5917
Security Audit — socket — wechat-writer