lov-wechat-article-operator
Warn
Audited by Socket on Aug 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose is plausible, but the skill’s real behavior is hidden behind encrypted runtime decryption and a transitive installer chain. Same-org tooling lowers the chance of outright malware, yet the opaque payload makes capability, credential use, and data flows unverifiable, so the skill is high risk to trust.
Confidence: 88%Severity: 78%
Audit Metadata