WeChat MP CN

PassAudited by ClawScan on May 1, 2026.

Overview

This is a documentation-only WeChat monitoring skill that looks coherent, with the main caution that real API use would require careful WeChat or third-party account authorization.

This skill appears safe to install as documentation-only. Before using any API, SDK, or analytics platform it references, confirm what account permissions are required, prefer read-only access, and avoid sharing unnecessary credentials or private data.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

If you use the API-based workflow, the agent or related tools may need access to a WeChat/Open Platform account, and overly broad permissions could expose or affect account data.

Why it was flagged

The skill discloses that WeChat Official Account API use requires authentication. This is expected for the stated purpose, but it means users may need to authorize an account or API credentials.

Skill content

微信公众号 API 需要认证，需要以下之一：

### 1. 官方 API（需认证）

Recommendation

Use least-privilege, read-only access where possible; review API scopes and third-party platform permissions; do not provide unnecessary account credentials or session data.