wechat-comic-factory

• Analyzed: May 11, 2026, 6:19 AM
• Findings: 1
• Version: 1.0.0
• Hash: 147868fbbfab57e51ee4e05ed2087ea23dcd477bc85b1bb2bf5bb83981e0dade
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate automation pipeline for generating WeChat comic articles using LLMs and image generation APIs. It orchestrates a multi-stage process (planning, image generation, compression, and HTML formatting) and includes a final step to push content to the WeChat Official Account draft box. The code follows secure practices by using a local 'config.json' for sensitive credentials (API keys for DeepSeek, DashScope, and WeChat) and includes defensive instructions in SKILL.md to prevent the AI agent from hallucinating success or bypassing configuration checks. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found across the scripts (run_pipeline.py, common.py, etc.).