WeChat MP CN

AdvisoryAudited by Static analysis on Apr 30, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

If you use the API-based workflow, the agent or related tools may need access to a WeChat/Open Platform account, and overly broad permissions could expose or affect account data.

Why it was flagged

The skill discloses that WeChat Official Account API use requires authentication. This is expected for the stated purpose, but it means users may need to authorize an account or API credentials.

Skill content

微信公众号 API 需要认证，需要以下之一：

### 1. 官方 API（需认证）

Recommendation

Use least-privilege, read-only access where possible; review API scopes and third-party platform permissions; do not provide unnecessary account credentials or session data.