yichen-wechat-mp-batch-exporter

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose generally matches batch WeChat export, but the footprint is much riskier than a normal content downloader: it involves raw WeChat credentials, proxy/MITM certificate workflows, and optional routing through a third-party exporter domain. The strongest concerns are credential interception and intermediary data flow, not confirmed malware.

Confidence: 84%Severity: 79%
Audit Metadata
Analyzed At
Jul 20, 2026, 01:41 PM
Package URL
pkg:socket/skills-sh/mcncarl%2Fyichen-skills%2Fyichen-wechat-mp-batch-exporter%2F@b5a673b68b03719cb4538c035037c062fed7ef9d2ed33d4919f1de15be93a33b
Security Audit — socket — yichen-wechat-mp-batch-exporter