Wechat Publisher DraftGet

• Analyzed: May 15, 2026, 9:51 AM
• Findings: 1
• Version: 0.1.1
• Hash: 9ca4ba9c15ea4a055756f4dcf02f280320f69dee4edaace6b98be84bb55b45f7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a structured workflow for publishing WeChat drafts using the md2wechat CLI and Python. The primary script, `scripts/publish.sh`, handles image uploads, draft creation, and mandatory backend verification via the official WeChat API (api.weixin.qq.com). While the script accesses sensitive credentials (WECHAT_APPID and WECHAT_SECRET), it does so only to communicate with legitimate WeChat endpoints. Notably, the verification logic includes a safety check to detect and prevent the leakage of local file system paths (e.g., /home/ye/) in the published content.