wechat-article-publisher
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's stated purpose is plausible, but its real data flow depends on an unrelated third-party service that receives the API key and full article content instead of using official WeChat API endpoints directly. The only static finding is low concern by itself, but the intermediary credential-routing pattern materially raises trust and data-handling risk.
Confidence: 82%Severity: 72%
Audit Metadata