wechat-article-md-local

Warn

Audited by Socket on Oct 22, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/save_wechat_article.py

This is an article-saving and image-localization utility with no clear malware indicators. The main security issue is SSRF: attacker-controlled image URLs are fetched without host, scheme, redirect, or private-network restrictions. Generated HTML may also retain unsafe event-handler attributes or javascript-style links because sanitization is incomplete. The exact fragment is syntactically incomplete and would require correction before execution.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Oct 22, 2026, 01:36 PM
Package URL
pkg:socket/skills-sh/hanzhangzzz%2Fagent-skills-zh%2Fwechat-article-md-local%2F@4a5b79e9dd2ec2b60bfcc5f78f349600a7d1131a17d8bacc8715b3cdfad05d0e