auth-wechat-miniprogram

Warn

Audited by Runlayer on Feb 25, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
1
Flagged
1
Chunks
2
Flagged Files (1)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [2/2] Description: // Get verified user identity - automatically injected by WeChat const { OPENID, APPID, UNIONID } = cloud.getWXContext() console.log('User identity:', { OPENID, APPID, UNIONID }) return { success: true, message: 'Authentication successful', identity: { openid: OPENID, appid: APPID, unionid: UNIONID || 'Not available' }, timestamp: new Date().toISOString() } } ``` **Mini Program code:** ```js // pages/index/index.js Page({ data: { userIdentity: null }, onLoad: fu

Audit Metadata
Max File Score
78%
Classification
KNOWN_SERVER_KNOWN_TOOL_LIST
Files Scanned
1
Files Flagged
1
Chunks Analyzed
2
Analyzed
Feb 25, 2026, 02:50 PM
Security Audit — runlayer — auth-wechat-miniprogram