soia-pkm-clip-wechat-account

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能目的与“归档自己管理的公众号文章到 Obsidian”基本一致,但实现范围偏高风险:它指导安装其他技能/插件、要求高敏会话票据,并通过非官方微信后台接口批量访问内容。未见明显第三方窃密端点,因此更像高风险/可疑技能而非确认恶意;主要问题是凭据敏感度、传递安装链和非官方接口使用不成比例。

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Aug 6, 2026, 08:08 AM
Package URL
pkg:socket/skills-sh/soia-team%2Fsoia-open-pkm-vault-skills%2Fsoia-pkm-clip-wechat-account%2F@35211027b6468f9f927ed6f9d3036fd1d737540a9fc02c328e7f67c15aca64f8
Security Audit — socket — soia-pkm-clip-wechat-account