wechat-writing
Fail
Audited by Snyk on Jul 12, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 0.70). The GitHub repository and the skills.sh registry are unvetted third‑party distribution channels referenced in the repo (they can be cloned/installed via git/npx and therefore may deliver and execute arbitrary code), whereas nodejs.org is the official vendor site and not suspicious.
Issues (1)
E005
CRITICALSuspicious download URL detected in skill instructions.
Audit Metadata