wechat-bro@1.6.10
AI agent interface for WeChat Web — send/receive messages, manage contacts, upload media, transcribe voice
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe install-time command installs Puppeteer’s Chrome asset into the package’s cache location, and the reviewed credential flow sends WeChat session data to the upload URL supplied by WeChat. Orchestrator message handling is scoped to configured contacts and agent files, so the scanner alerts do not establish malicious behavior.
Decision evidence
public snapshot- The postinstall hook checks for Puppeteer’s bundled Chromium and installs Chrome into ~/.wechat-bro/chromium only if it is missing.
- The orchestrator watches contacts declared in agent files and runs configured harness tasks for messages; its default agents have no contact targets configured.
- Media upload sends the WeChat session cookies and upload parameters to the upload URL obtained from the WeChat page, as required to upload media.
- The package has an automatic postinstall hook and can download Chrome.
- When the daemon becomes ready, it sends a short status message to the account’s private filehelper chat.
Source & flagged code
6 flaggedInstall-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgFindings
Affected versions and remediation
This report applies to wechat-bro@1.6.10.
See all versions of wechat-bro for other recorded verdicts.
- Review the evidence and your use of wechat-bro@1.6.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.