Weixin WeChat Channel

• Analyzed: May 11, 2026, 7:12 AM
• Findings: 1
• Version: 1.0.2
• Hash: 9bbfb7ac1a1b15cb09ce9cb4511224b81e3e83d55874bd50e30c452f5287daf5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill implements a remote licensing and DRM (Digital Rights Management) mechanism that requires a paid 'card key' for operation, as detailed in SKILL.md. The script scripts/license_gate.py collects hardware-specific data (MAC address, hostname, and system info) to generate a machine fingerprint, which is then transmitted to a hardcoded remote IP (120.27.202.105). While this behavior is aligned with the developer's stated commercial model, the collection of hardware identifiers and the requirement for remote 'phone-home' validation are high-risk behaviors that warrant caution.