wx-cli-wechat-local-data

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the data-access capabilities are broadly aligned with a local WeChat forensics/export CLI, but the trust story is inconsistent. The skill is published as ara.so while installation and transitive trust point to jackwener, and it promotes raw GitHub pipe-to-shell installers plus a third-party skill install. No obvious credential exfiltration or off-machine data routing is described, but the install and delegation paths are not proportionate to a high-trust agent skill without clearer same-org provenance.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Sep 15, 2026, 12:12 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdevtools-skills%2Fwx-cli-wechat-local-data%2F@2929cf727b04b26b327751ca25dac39e1e5457dcf8e8a9fc4ee00f050983397b
Security Audit — socket — wx-cli-wechat-local-data