Wechat Tutorial Editor Publisher

• Analyzed: Mar 31, 2026, 11:01 AM
• Findings: 1
• Version: 1.0.0
• Hash: 4e1cf05d0ce33f5c4f9e53fcc93c9de5d2ec3c1c821aba4dfec8f985af749807
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle exhibits several high-risk behaviors and security flaws, though clear malicious intent is not established. Most notably, SKILL.md instructs the AI agent to 'encrypt' sensitive WeChat AppID and AppSecret credentials using MD5 and 'decrypt' them later; since MD5 is a one-way hash and cannot be decrypted, this instruction leads to fundamentally broken credential management. Additionally, the bundle starts a local Express server (server.js) without authentication to collect user information and images, and the publish.sh script performs global NPM installations and reads from the sensitive TOOLS.md file to extract secrets. These patterns represent significant vulnerabilities and risky capabilities typical of over-privileged automation tools.