wechat-article-writer

No clear evidence of classic malware (e.g., backdoor, credential theft, or network exfiltration) is present in the shown code. However, the module embeds Markdown-derived fields into HTML output via direct string concatenation without escaping/sanitization. This creates a strong stored/preview XSS and HTML injection risk in the generated article.html/article-plain.html and potentially in the screenshot rendering context (where injected scripts could execute during Playwright rendering). Additionally, the script copies generated content to the system clipboard and opens a browser preview, increasing the operational impact of injected content.