wechat-writer
Warn
Audited by Socket on May 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The writing/archive workflow is largely coherent and local, but it recommends installing a separate third-party SEO helper skill that uses unofficial desktop automation with elevated macOS permissions. That transitive trust and disproportionate permission model make the overall skill medium risk even though there is no clear evidence of credential theft or confirmed malware.
Confidence: 84%Severity: 62%
Audit Metadata