wechat-mp-writer

Warn

Audited by Socket on Aug 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the writing capabilities align with the stated purpose, but the optional publishing path depends on an unverified third-party publisher skill and may route content through a non-official intermediary rather than direct Tencent APIs. The main risk is transitive trust and unclear data flow, not confirmed malware in this writer skill itself.

Confidence: 86%Severity: 64%
Audit Metadata
Analyzed At
Aug 23, 2026, 11:26 AM
Package URL
pkg:socket/skills-sh/mxx1111%2Fwechat-mp-writer-skill-mxx%2Fwechat-mp-writer%2F@f3315759b98cb71aeb85165058613bddead2425e
Security Audit — socket — wechat-mp-writer