lov-wdb-cli
Warn
Audited by Socket on Aug 25, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The claimed purpose matches WeChat data access, but the skill’s core behavior is hidden behind an encrypted, remotely decrypted package, so users cannot verify what will run before granting access to highly sensitive local chat data and keys. Official-looking distribution lowers pure malware certainty, but the combination of opaque runtime code, remote decryption, and sensitive local-data access makes this a high security-risk skill.
Confidence: 86%Severity: 84%
Audit Metadata