Security audit
Security checks for vulnerabilities and agentic risk
This skill clearly does one account-changing task: it guides an agent through creating a WeChat Channels video collection.
Install only if you want an agent to operate your logged-in WeChat Channels backend and create collections. Before use, provide the exact collection title and confirm the final Create action to avoid unwanted account clutter.
The trigger phrases are generic and repeated, with no clear exclusion boundaries or user-confirmation gate before executing a write-capable workflow. In an agent environment, this increases the chance of accidental invocation from ordinary conversation, which could lead to unintended navigation and account-affecting actions in the user's WeChat Channels backend.
The skill performs a persistent write action—creating a new collection in the user's account—but does not clearly warn that it will modify account state or require explicit user approval at the point of execution. This is dangerous because an automatically invoked browser agent could create unwanted collections, causing account clutter, operational mistakes, or abuse if triggered unintentionally.
No suspicious patterns detected.
