auth-wechat-miniprogram
Warn
Audited by Runlayer on Feb 25, 2026
Risk Level: MEDIUM
Scan Summary
Flagged Files (1)
SKILL.mdHIGH
78.3%
Malicious tool definition detected
Tool: SKILL.md [2/2] Description: // Get verified user identity - automatically injected by WeChat const { OPENID, APPID, UNIONID } = cloud.getWXContext() console.log('User identity:', { OPENID, APPID, UNIONID }) return { success: true, message: 'Authentication successful', identity: { openid: OPENID, appid: APPID, unionid: UNIONID || 'Not available' }, timestamp: new Date().toISOString() } } ``` **Mini Program code:** ```js // pages/index/index.js Page({ data: { userIdentity: null }, onLoad: fu
Audit Metadata