Wechat Mp Publish

• Verdict: Advisory
• Analyzed: May 8, 2026, 6:06 PM
• Findings: 3
• Version: 1.0.1
• Reason codes:
  suspicious.exposed_secret_literalsuspicious.secret_argv_exposure
• Engine: v2.4.22

Overview

Detected: suspicious.exposed_secret_literal, suspicious.secret_argv_exposure

Findings (3)

critical

suspicious.exposed_secret_literal

• Location: ENCRYPTION.md:127
• Finding: File appears to expose a hardcoded API secret or token.

critical

suspicious.exposed_secret_literal

• Location: scripts/wechat/api_client.py:292
• Finding: File appears to expose a hardcoded API secret or token.

critical

suspicious.secret_argv_exposure

• Location: ENCRYPTION.md:53
• Finding: Instructions pass high-value credentials through process argv.