wechat-article-publisher

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's stated purpose is plausible, but its real data flow depends on an unrelated third-party service that receives the API key and full article content instead of using official WeChat API endpoints directly. The only static finding is low concern by itself, but the intermediary credential-routing pattern materially raises trust and data-handling risk.

Confidence: 82%Severity: 72%
Audit Metadata
Analyzed At
Sep 16, 2026, 07:09 AM
Package URL
pkg:socket/skills-sh/iamzifei%2Fwechat-article-publisher-skill%2Fwechat-article-publisher%2F@537155ed62c894be716271f1b5f42ee531b549375506672e508cb148a0ce12b0