wechat-mp-batch-exporter

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s basic article-export purpose is coherent, but its enhanced-data workflow expands into credential capture, proxy manipulation, and possible TLS interception. The strongest concern is routing WeChat-related data through third-party tooling/endpoints rather than official service flows, which creates high security risk even though the documentation includes manual-consent guardrails.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Jul 10, 2026, 01:10 AM
Package URL
pkg:socket/skills-sh/mcncarl%2Fyichen-skills%2Fwechat-mp-batch-exporter%2F@80862e7833582bbda628a1a3796a778271f403cf0621312e2c8c258ae290f2b4
Security Audit — socket — wechat-mp-batch-exporter