wecom-notify

Warn

Audited by Socket on Oct 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core purpose is coherent, but the required proxy relay through a private ZeroTier-accessible host breaks direct-to-official API integrity and creates avoidable interception risk for message content and possible tokens. No obvious malware or hostile installer is present, but the network/data-flow design is not proportionate for a simple WeCom notifier.

Confidence: 86%Severity: 71%
Audit Metadata
Analyzed At
Oct 10, 2026, 06:41 AM
Package URL
pkg:socket/skills-sh/xueheng-li%2Fopenclaw-wechat%2Fwecom-notify%2F@9edd71be7d1019a1857530b1261935e8399afb007890bf5c911b4e23923eb034