Publish Wechat Draft

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:39 PM UTC
• Version:
  1.0.0

Overview

This skill is a disclosed helper for creating WeChat Official Account drafts, with some caution needed around broad trigger wording and third-party CLI execution.

Install only if you intend to let an agent help create WeChat Official Account drafts. Before allowing npm install, Playwright installation, login, or publish commands, confirm the request is explicit, review the referenced publisher project, and keep WeChat cookies out of git.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The trigger phrases are broad enough to activate on casual mentions like '发公众号' or '发微信', which can cause the skill to run in situations where the user did not clearly request publication. Because this skill can install dependencies, launch browser-based login flows, and publish content to a WeChat draft box, accidental invocation increases the risk of unintended side effects and privacy-sensitive operations.

VirusTotal

66/66 vendors flagged this skill as clean.