Security audit
WeChat Markdown Article
Security checks across malware telemetry and agentic risk
Overview
This skill locally formats Markdown for WeChat and only uploads a draft when the user explicitly enables and confirms upload.
Before installing, understand that local HTML generation is the default. If you use upload mode, keep WeChat credentials in environment variables or a secret store, review the generated HTML and destination account, and only run with both --upload and --confirm-upload when you intend to send the article and optional cover image to WeChat.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
61/61 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.