Back to skill
Skillv0.1.0

VirusTotal security

Zhy Wechat Writing · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewApr 30, 2026, 6:26 AM
Hash
29f717c9b56ad3728885b4887e4d99fd1f7f98468470835cf4a0080935a565a3
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: zhy-wechat-writing Version: 0.1.0 The skill orchestrates a complex WeChat article creation workflow that includes web searching, content generation, and automated publishing. It exhibits high-risk behaviors such as executing external Node.js scripts via shell commands (Step 6, 7, and 8 in SKILL.md) and requesting access to a Chrome profile directory (wechat_profile_dir) to maintain login states. While these capabilities are plausibly necessary for the stated purpose of automating WeChat publishing, the combination of shell execution and access to sensitive browser data represents a significant security risk without further sandboxing.
External report
View on VirusTotal