wechat-article-fetcher

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/fetch_wechat_article.py

The visible code is intended as a WeChat article downloader, not an apparent malware payload. The main security concern is unsafe forwarding of a user-provided Cookie to arbitrary URLs, combined with unrestricted requests to image URLs from remote HTML. HTML output is also generated without escaping. The fragment is malformed and incomplete, so behavior of the missing functions cannot be assessed; those functions should be reviewed before use.

Confidence: 95%Severity: 58%
Audit Metadata
Analyzed At
Sep 14, 2026, 04:48 PM
Package URL
pkg:socket/skills-sh/wwwzhouhui%2Fskills_collection%2Fwechat-article-fetcher%2F@fdece5500be4de68666fd87afb226af5c7740e3dafe2a20b2fafbdf1de39f601