Security audit
Security checks for vulnerabilities and agentic risk
This is a Chinese-language WeChat Mini Program reference skill with documentation examples, not a skill that runs code or sends user data.
This skill is appropriate if you want Chinese-language help with WeChat Mini Program development. Treat the included API endpoints, storage calls, and privacy-related examples as templates to adapt carefully in your own project, especially before adding real network domains, user data handling, or sensitive Mini Program permissions.
The manifest description and top-level heading present the skill entirely in Chinese and frame it as the default interaction mode, without indicating that other languages are supported or that the user can choose their preferred language. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
wx.request({
url: 'https://api.example.com/data',
method: 'GET',
success: function(res) {
console.log(res.data);
The entire document is written in Chinese and does not indicate that language choice is optional or user-selectable. Per the policy criteria, natural-language content that effectively forces a specific language without opt-in is a locale/language policy concern.
No suspicious patterns detected.