baoyu-post-to-wechat — security audits

Flagged by auditors

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  pass

  This skill automates the process of posting articles and image-based content to WeChat Official Accounts. It supports two publishing methods: the official WeChat API and browser-based automation via Chrome DevTools Protocol (CDP). The skill includes advanced features such as cross-platform clipboard management (macOS, Windows, and Linux), multi-account support, and automatic image processing to ensure compatibility with WeChat's requirements.

  Risk: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSMay 18, 2026Full report

• Socket

  fail

  1 alert: gptMalware

  May 18, 2026Full report

• Snyk

  pass

  Risk: LOW · No issues

  Risk: LOWMay 18, 2026Full report

• Runlayer

  warn

  77/126 files flagged

  Risk: MEDIUMMar 15, 2026Full report

• ZeroLeaks

  pass

  1 finding · Score: 86/100

  Risk: LOWApr 16, 2026Full report