soia-pkm-clip-wechat-account

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能的核心能力与“归档自己管理的公众号文章到 Obsidian”总体一致,未见把数据或凭据路由到明显的第三方窃取端点,因此不像确认恶意。但它要求安装外部 skill、使用 -a '*' 通配权限,并指导提取高敏感微信会话票据配合非官方后台接口,整体属于中高风险、偏可疑的技能配置,而非低风险文档型技能。

Confidence: 86%Severity: 74%
Audit Metadata
Analyzed At
Jul 16, 2026, 08:22 AM
Package URL
pkg:socket/skills-sh/soia-team%2Fsoia-open-skills%2Fsoia-pkm-clip-wechat-account%2F@16706d87197cabd404d7ca00d7cfec626c31e7980f28e78af3f9a093d2a82620
Security Audit — socket — soia-pkm-clip-wechat-account