skills/lovstudio/skills/wxmp-cracker/Socket

wxmp-cracker

Warn

Audited by Socket on Apr 19, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's public purpose may match WeChat scraping, but its actual footprint is hidden by encrypted remote instructions, repeated network decryption, transitive skill installation, and handling of session cookies/tokens outside an official API flow. The concealment and unverifiable dependency chain are disproportionate and prevent trustworthy review.

Confidence: 98%Severity: 93%

Audit Metadata

Analyzed At

Apr 19, 2026, 06:28 AM

Package URL

pkg:socket/skills-sh/lovstudio%2Fskills%2Fwxmp-cracker%2F@79208343d8367339cca62fdce502619bb272f19f