wecomcli-get-meeting

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

该技能的功能与“查询企业微信会议”表面一致,但其核心完全依赖来源未验证的外部CLI,且可访问高敏感会议数据。未见明显恶意或隐藏外传指令,但安装/执行信任不足、数据敏感度高,整体应判定为 SUSPICIOUS。

Confidence: 85%Severity: 78%
Audit Metadata
Analyzed At
Mar 29, 2026, 05:09 PM
Package URL
pkg:socket/skills-sh/WeComTeam%2Fwecom-cli%2Fwecomcli-get-meeting%2F@5ab1d3bfce3e0e34618b7c0e1dc0d6724f3b6b17