Wechat Article For Ai

• Outcome: Pass
• Latest audit: May 29, 2026 · 8:25 PM UTC
• Version: 1.0.0

Overview

This skill is coherent for converting WeChat articles to Markdown, with expected web access and local file output but some dependency hygiene cautions.

Install this in a virtual environment, use a dedicated output directory, and pin or update dependencies before relying on it. Be aware it will fetch WeChat pages, may download a Camoufox browser, and can save Markdown/images/debug HTML locally under the chosen output path.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (9)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 89% confidence
• Finding: The skill explicitly describes network access to fetch WeChat articles and local file writes for Markdown and image output, yet it declares no permissions. This mismatch can mislead users or hosting platforms about the tool's actual capabilities, reducing informed consent and weakening sandbox or policy enforcement.

Missing User Warnings

Low

• Confidence: 84% confidence
• Finding: The description explains conversion features but does not clearly warn users that article text and images are downloaded from the internet and written to local storage. This can cause unintended data storage, disk usage, and privacy surprises, especially in agent-driven environments where users may not see the full operational details.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

camoufox[geoip]
markdownify
beautifulsoup4
httpx
mcp

• Confidence: 95% confidence
• Finding: The dependency is unpinned, so installs may resolve to different versions over time, including newly introduced vulnerable or incompatible releases. In a tool that fetches and transforms remote web content, this weakens supply-chain integrity and reproducibility, though by itself it is not an immediate exploit.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

camoufox[geoip]
markdownify
beautifulsoup4
httpx
mcp

• Confidence: 95% confidence
• Finding: beautifulsoup4 is unpinned, which allows uncontrolled dependency drift and increases exposure to future vulnerable releases or breaking changes. This is a supply-chain hygiene issue rather than a direct code flaw.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

camoufox[geoip]
markdownify
beautifulsoup4
httpx
mcp

• Confidence: 98% confidence
• Finding: httpx is unpinned, which is more concerning because it is a network-facing library used for HTTP handling. Unpinned installation can silently pull vulnerable releases and expand exposure in a skill that retrieves external content from the internet.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

markdownify
beautifulsoup4
httpx
mcp

• Confidence: 97% confidence
• Finding: mcp is unpinned, and the package has recent high-severity advisories in the static findings, making version drift materially riskier. In an agent skill context, MCP components can be network-exposed or part of trusted automation paths, so supply-chain control matters more.

Known Vulnerable Dependency: markdownify — 1 advisory(ies): CVE-2025-46656 (markdownify allows large headline prefixes such as <h9999999>, which causes memo)

Low

• Category: Supply Chain
• Confidence: 80% confidence
• Finding: If the installed markdownify version is affected by CVE-2025-46656, malformed heading tags could trigger excessive memory consumption during conversion, enabling denial of service on crafted input. Because this skill converts remote article content to Markdown, attacker-controlled HTML could plausibly reach the parser, but the impact is mainly availability.

Known Vulnerable Dependency: httpx — 2 advisory(ies): CVE-2021-41945 (Improper Input Validation in httpx); CVE-2021-41945 (Encode OSS httpx <=1.0.0.beta0 is affected by improper input validation in `http)

Critical

• Category: Supply Chain
• Confidence: 87% confidence
• Finding: The finding is credible if the resolved httpx version falls within the vulnerable range; improper input validation in a core HTTP client can affect request handling and security boundaries. Since this skill fetches external web content, a vulnerable httpx version could increase risk around malformed URLs, redirects, or request-target processing.

Known Vulnerable Dependency: mcp — 3 advisory(ies): CVE-2025-53366 (MCP Python SDK vulnerability in the FastMCP Server causes validation error, lead); CVE-2025-66416 (Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection); CVE-2025-53365 (MCP Python SDK has Unhandled Exception in Streamable HTTP Transport, Leading to )

High

• Category: Supply Chain
• Confidence: 92% confidence
• Finding: The mcp package is reported with multiple serious advisories, including DNS rebinding protection gaps and transport error-handling issues, which can be significant in agent/server contexts. If this skill exposes or relies on MCP server features, these issues could enable network-origin abuse, availability problems, or bypass of expected trust boundaries.

VirusTotal

66/66 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.