微信公众号自动排版发布---一键安装

• Analyzed: May 10, 2026, 6:39 AM
• Findings: 1
• Version: 1.0.0
• Hash: e198bc91be86dfcd251baeeb5f72b8d5427e36a31ecf48c8c9546cfd4e474b97
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed to automate the setup of a WeChat publishing agent team, including visual design and operational analysis agents. It manages sensitive WeChat API credentials by prompting the user and storing them in a local .env file with restricted permissions (600). While there is a functional inconsistency (likely a copy-paste bug) where the publishing script (wechat_publish.cjs) looks for credentials in a different workspace directory than the one created by the setup instructions (SKILL.md), the behavior is entirely aligned with the stated purpose. No evidence of data exfiltration, malicious execution, or prompt injection was found.