Wechat Article Pipeline

• Outcome: Pass
• Latest audit: May 28, 2026 at 10:48 AM UTC
• Version:
  1.0.0

Overview

This is a disclosed WeChat article drafting and formatting workflow, with a user-control caveat around its automatic mode.

Safe to install for WeChat article drafting and formatting. Use automatic mode deliberately, review generated facts and wording before publishing, and check image rights or local images before including them in final HTML.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The manifest enables implicit invocation while describing a broad, multi-step content pipeline without clear trigger constraints, exclusions, or user-intent boundaries. That increases the chance the skill is auto-selected in loosely related conversations and can cause unintended drafting, review, or orchestration actions without sufficiently explicit user consent.

VirusTotal

65/65 vendors flagged this skill as clean.