Wechat Mp Auto

• Analyzed: May 16, 2026, 7:37 AM
• Findings: 1
• Version: 0.1.2
• Hash: fb39c31e50392184a2f8a7de413f008e5ea4d995155a2e3de19c220f73475968
• Source: palm
• External report: View on VirusTotal

Findings (1)

The wechat-mp-auto skill bundle is a legitimate and well-structured tool designed to automate the lifecycle of WeChat Official Account articles, including topic research, content generation, image processing, and publishing. It interacts with the official WeChat API and several third-party services (Tavily, Pexels, Unsplash, and various AI image providers) using credentials stored in standard configuration directories (~/.config/wechat-mp-auto/ and ~/.openclaw/). The code implements security best practices such as credential masking in logs (src/utils/logger.py), path validation for image downloads (src/skills/image_generator.py), and the use of list-based subprocess calls to prevent command injection (src/skills/image_processor.py). No evidence of malicious intent, unauthorized data exfiltration, or harmful prompt injections was found.