skills/m1heng/claude-plugin-weixin/configure/Socket

configure

Warn

Audited by Socket on Mar 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s core purpose is coherent, and official WeChat endpoints are referenced, but it executes unverified cached plugin scripts and uses transient JS tooling during authentication. Main concern is install/execution trust and the custom baseUrl override, not confirmed credential theft or overtly malicious behavior.

Confidence: 82%Severity: 58%

Audit Metadata

Analyzed At

Mar 22, 2026, 08:03 AM

Package URL

pkg:socket/skills-sh/m1heng%2Fclaude-plugin-weixin%2Fconfigure%2F@b1ea9124cacbcd35573db7744c88c39adf8925e8