WeChat MP CN

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: wechat-mp-cn Version: 1.0.0 The skill bundle contains only metadata files (_meta.json, package.json) and a descriptive markdown file (SKILL.md). The SKILL.md provides information about WeChat official account monitoring, including external links to official APIs, third-party tools, and manual monitoring platforms. There is no executable code, no evidence of prompt injection attempts against the AI agent, and no indicators of malicious behavior such as data exfiltration, unauthorized execution, or persistence mechanisms. All content aligns with the stated purpose of describing a monitoring skill.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If you use the API-based workflow, the agent or related tools may need access to a WeChat/Open Platform account, and overly broad permissions could expose or affect account data.

Why it was flagged

The skill discloses that WeChat Official Account API use requires authentication. This is expected for the stated purpose, but it means users may need to authorize an account or API credentials.

Skill content
微信公众号 API 需要认证,需要以下之一:

### 1. 官方 API(需认证)
Recommendation

Use least-privilege, read-only access where possible; review API scopes and third-party platform permissions; do not provide unnecessary account credentials or session data.