Wechat Automation

• Analyzed: Apr 17, 2026, 4:36 AM
• Findings: 1
• Version: 0.3.0
• Hash: 31eccd5dfae8b1258ef1bb3d98e514a6a06af81ae3fdb11f8bb9fb8f994fbcfe
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides legitimate functionality for sending messages to Enterprise WeChat (WeCom) via webhooks. The implementation in `index.js` and `test-webhook.sh` correctly uses the official WeChat API endpoints, and the documentation (README.md, SKILL.md) accurately describes the setup and usage without any signs of malicious intent, data exfiltration, or prompt injection.