微信公众号文章发布

• Outcome: Pass
• Latest audit: May 28, 2026, 7:55 AM
• Version:
  1.0.0

Overview

This instruction-only skill helps create WeChat Official Account articles and save them as drafts, which matches its stated purpose but still changes the logged-in account's draft content.

Install this only if you are comfortable letting an agent work inside your logged-in WeChat Official Account and create saved drafts. Review the article, factual claims, cover image, selected account, and any copyright or reputation risks before publishing anything.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill instructs the agent to click the WeChat '保存' button and save the generated article directly into the user's official-account draft box, but the skill description does not clearly warn users that a state-changing action will occur in their authenticated account. This can cause unintended content creation or storage under the user's identity, especially if the generated content is inaccurate, infringing, or reputationally harmful.

VirusTotal

66/66 vendors flagged this skill as clean.