wechat-bro@1.6.7
AI agent interface for WeChat Web — send/receive messages, manage contacts, upload media, transcribe voice
AI Security Review
scanned 26d ago · by lpm-firewall-aiSource inspection found a postinstall hook for Puppeteer Chromium setup and a task-dispatch agent-file link, with contact-specific working directories by default. The inspected upload path uses page-derived WeChat parameters; no concrete attack behavior was established.
Decision evidence
public snapshot- package.json’s postinstall provisions Puppeteer’s Chromium under the package’s own home-directory cache.
- The AGENTS.md helper links or copies an agent file into a task working directory; dispatch uses a contact-specific directory by default.
- Media upload obtains credentials from the active WeChat page and uses upload parameters for the selected contact.
- The CLI stores its Chromium cache under the package’s own data directory by default.
Source & flagged code
7 flaggedInstall-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgFindings
Affected versions and remediation
This report applies to wechat-bro@1.6.7.
See all versions of wechat-bro for other recorded verdicts.
- Review the evidence and your use of wechat-bro@1.6.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.