ClawHub
Back to skill

Security audit

WeChat MiniProgram CloudBase Scaffold

Security checks across malware telemetry and agentic risk

Overview

This is an opinionated WeChat Mini Program CloudBase scaffold with disclosed database, login, and scheduled-message templates, not hidden or destructive behavior.

Install this when you specifically want a WeChat CloudBase Mini Program scaffold. Before using it in production, confirm CloudBase cost and lock-in are acceptable, pin the wx-server-sdk dependency if reproducible builds matter, and decide whether first-login automatic public-group membership fits your privacy and product expectations.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (6)

Natural-Language Policy Violations

Medium
Confidence
92% confidence
Finding
The skill explicitly instructs the agent to choose CloudBase by default and only present alternatives in narrow edge cases, which overrides or bypasses normal user choice about platform, hosting, cost, and architectural constraints. In an agent context, this can steer users into a specific vendor ecosystem without informed consent, increasing the risk of misaligned architecture decisions, lock-in, and hidden operational or compliance issues.

Missing User Warnings

Medium
Confidence
82% confidence
Finding
The login handler has side effects beyond authentication: on first login it creates a user record and automatically enrolls the user into every public group. This can violate user expectations and privacy boundaries, and can also be abused to inflate memberships or trigger downstream group-based features without explicit consent. In a Mini Program scaffold, this pattern is especially risky because developers may copy it into production unchanged.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"description": "核心 API 云函数（单函数 REST 路由）",
  "main": "index.js",
  "dependencies": {
    "wx-server-sdk": "^2.7.2"
  }
}
Confidence
88% confidence
Finding
The dependency uses a caret range (^2.7.2), which permits automatic installation of future compatible releases. In a cloud function context, this can introduce supply-chain risk or unexpected behavior changes if a new upstream version contains a vulnerability or breaking change, reducing build reproducibility.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"description": "每日提醒推送（定时触发器 + 云调用订阅消息）",
  "main": "index.js",
  "dependencies": {
    "wx-server-sdk": "^2.7.2"
  }
}
Confidence
92% confidence
Finding
The dependency is specified with a caret range (^2.7.2), which allows newer minor and patch versions to be installed. This can introduce supply-chain risk and non-reproducible builds if an upstream release is compromised or causes unexpected behavior in a cloud function that sends scheduled subscription messages.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"description": "登录云函数（OPENID 幂等建号 + 自动加入公开组）",
  "main": "index.js",
  "dependencies": {
    "wx-server-sdk": "^2.7.2"
  }
}
Confidence
91% confidence
Finding
The dependency version uses a caret range (^2.7.2), which permits automatic installation of newer minor and patch releases. This can introduce supply-chain risk because future upstream changes or a compromised published version could be pulled into deployments without explicit review or reproducible builds.

Unpinned Dependencies

Low
Category
Supply Chain
Content
"description": "幂等建集合 + 预置种子数据",
  "main": "index.js",
  "dependencies": {
    "wx-server-sdk": "^2.7.2"
  }
}
Confidence
93% confidence
Finding
Using a caret range for wx-server-sdk allows automatic installation of newer minor/patch releases, which can introduce supply-chain risk, unexpected breaking behavior, or vulnerable transitive updates at deploy time. In a cloud function scaffold, dependency drift is more concerning because the package may be deployed into backend execution environments where compromised or incompatible updates affect server-side logic.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.