wechat-theme-extractor-cn
Audited by Socket on Mar 10, 2026
1 alert found:
Obfuscated FileThe skill's stated purpose (extract styling from a WeChat article and generate/insert a theme for markdown-wechat.html with a preview) is broadly coherent with its described workflow. It involves local file edits and a single external fetch to retrieve article HTML. There is no evident credential usage, no data exfiltration, and no autonomous real-world actions beyond user-initiated preview. The main point of caution is the reliance on an external script for extraction (script/extract.py) whose provenance cannot be verified from the snippet alone, which introduces a potential supply-chain risk if the script is untrusted. Overall, the footprint is benign/moderately suspicious pending verification of the external script source.