skills/hocgin/agent-skills/wenyan-cli/Socket

wenyan-cli

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The overall capability matches a Markdown-to-WeChat publishing tool, but provenance is muddied by a package/repo/publisher mismatch, and server mode routes content plus API credentials to arbitrary third-party endpoints rather than official APIs. This looks more like a real but loosely trusted publishing skill than confirmed malware.

Confidence: 88%Severity: 61%

Audit Metadata

Analyzed At

Apr 9, 2026, 10:24 AM

Package URL

pkg:socket/skills-sh/hocgin%2Fagent-skills%2Fwenyan-cli%2F@f5d5f80dbdd3c2571801feac59459e21cea29c07