wechat-theme-extractor-cn

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's stated purpose (extract styling from a WeChat article and generate/insert a theme for markdown-wechat.html with a preview) is broadly coherent with its described workflow. It involves local file edits and a single external fetch to retrieve article HTML. There is no evident credential usage, no data exfiltration, and no autonomous real-world actions beyond user-initiated preview. The main point of caution is the reliance on an external script for extraction (script/extract.py) whose provenance cannot be verified from the snippet alone, which introduces a potential supply-chain risk if the script is untrusted. Overall, the footprint is benign/moderately suspicious pending verification of the external script source.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 03:14 PM
Package URL
pkg:socket/skills-sh/YangsonHung%2Fawesome-agent-skills%2Fwechat-theme-extractor-cn%2F@650f0776ee8a0543064cb5c4be3083a4298d7f3e