Not in the top 1,000 by GitHub stars
sssmmmwww/wxmini-security-audit
微信小程序全自动安全审计 Skill，基于 Claude Code Agent Teams。7 Agent 协作，覆盖敏感信息、API接口、加密分析、漏洞分析四大维度。采用脚本+LLM双层架构，脚本保证覆盖率，LLM保证准确率。
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
bc183912413b → bc183912413b
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → bc183912413b
No earlier version was observed for comparison.
418GitHub stars
4stars in 7 days
1skill in this repository
0commits in 30 days
Heat
5.0- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
How it works
wxmini-security-audit
When your agent uses it
微信小程序全自动安全审计 Skill。使用 Agent Teams 编排 Agent，分阶段完成从反编译到报告生成的全流程静态安全分析。覆盖敏感信息泄露、API接口提取、加解密算法分析、漏洞分析四大维度。采用"脚本预扫描 + LLM智能分析"双层架构，脚本保证覆盖率，LLM保证准确率。
What it loads into context
Frontmatter
182 tokensAlways available to the agent
SKILL.md
8,062 tokensWhen the skill is activated
Reference documents
27,007 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 核心原则（所有 Agent 必须遵守）
- 编排铁律（Orchestrator 禁令，硬性约束）
- 描述
- 触发方式
- 变量定义
- 工具依赖
- Agent 文件索引
- 执行流程
- ⛔ 流程强制执行规则（编排器必读）
- 详细编排指令（严格按编号顺序执行）
- 输出文件清单
- 错误处理策略
- 大文件处理策略
- 覆盖率要求
Scripts executed separately
tools/scripts/endpoint_extractor.pytools/scripts/secret_scanner.py
Files
.gitignoreasset155 bytesREADME.mddoc13,238 bytesSKILL.mdcore31,594 bytesSKILL.mdcore31,594 bytesSKILL.mdcore31,594 bytesSKILL.mdcore31,594 bytesSKILL.mdcore31,594 bytesagents/agent-01-decompiler.mddoc8,975 bytesagents/agent-02-secret-scanner.mddoc8,552 bytesagents/agent-03-endpoint-miner.mddoc9,809 bytesagents/agent-04-crypto-analyzer.mddoc9,052 bytesagents/agent-05-vuln-analyzer.mddoc17,221 bytesagents/agent-06-reporter.mddoc18,423 bytesagents/agent-07-custom-analyzer.mddoc11,982 bytestools/scripts/endpoint_extractor.pyruns31,274 bytestools/scripts/secret_scanner.pyruns24,694 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubSkills included
- wxmini-security-audit
Repository facts
- License
- No license detected
- Created
- Apr 3, 2026
- Last pushed
- Apr 3, 2026
- Forks
- 28
- Open issues
- 2
- Project activity
- Slowing
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 6, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 4 notes
SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- No broad tool permissions
- No dangerous shell commands
- 50 network referencesin 7 files: agents/agent-03-endpoint-miner.md:9 tools/scripts/secret_scanner.py:68 README.md:110 and 4 more
- No hidden or obfuscated text
- No instruction overrides
- 2 executable scriptsin 2 files: tools/scripts/endpoint_extractor.py:1 tools/scripts/secret_scanner.py:1
- 4 references to secretsin 1 file: tools/scripts/secret_scanner.py:32
- No requests to vote in Hot
Show all 56 signals by file
README.md
- Network accessline 110
| 依赖 | 说明 | |------|------| | [Claude Code](https://docs.anthropic.com/en/docs/claude-code) | Claude Code CLI 环境（支持 Agent Teams / Skill） | - Network accessline 111
|------|------| | [Claude Code](https://docs.anthropic.com/en/docs/claude-code) | Claude Code CLI 环境（支持 Agent Teams / Skill） | | Python 3.x | 系统已安装，仅使用标准库，无需 pip install | - Network accessline 112
| [Claude Code](https://docs.anthropic.com/en/docs/claude-code) | Claude Code CLI 环境（支持 Agent Teams / Skill） | - Network accessline 121
git clone https://github.com/sssmmmwww/wxmini-security-audit.git - Network accessline 131
> `unveilr` 为第三方开源工具，可从 [unveilr 项目](https://github.com/nicholaschan23/unveilr) 获取。
SKILL.md
- Network accessline 237
使用 `New-Item -ItemType Directory -Path "{output_dir}"` 创建目录 3. **解析用户特殊需求**：检查用户输入中是否包含以下指标： - 提到了具体的接口路径（`/api/xxx`, `https://xxx`） - Network accessline 238
3. **解析用户特殊需求**：检查用户输入中是否包含以下指标： - 提到了具体的接口路径（`/api/xxx`, `https://xxx`） - 提到了具体的参数名（如 `token`, `amount`, `password`） - Network accessline 239
- 提到了具体的接口路径（`/api/xxx`, `https://xxx`）
agents/agent-03-endpoint-miner.md
- Network accessline 9
- 本 Agent 仅做静态代码分析，**严禁发送任何网络请求** - 不得验证发现的接口 URL 是否可访问 - 不得使用 curl、wget 等工具测试接口连通性 - Network accessline 10
- 不得验证发现的接口 URL 是否可访问 - 不得使用 curl、wget 等工具测试接口连通性 - 不得执行任何外部程序 - Network accessline 11
- 不得使用 curl、wget 等工具测试接口连通性 - Network accessline 32
"type_statistics": { "full_url": 100, "path_fragment": 200, "wx_api_call": 50, ... }, "base_url_candidates": [ { "value": "https://api.example.com", "file": "config.js", "line": 5, "context": "..." } - Network accessline 33
"base_url_candidates": [ { "value": "https://api.example.com", "file": "config.js", "line": 5, "context": "..." } ], - Network accessline 34
{ "value": "https://api.example.com", "file": "config.js", "line": 5, "context": "..." } - Network accessline 39
"hit_count": 8, "hits": [ { "type": "full_url", "value": "https://api.example.com/login", "line": 42, "context": "...", "pattern": "full_http_url" }, - Network accessline 40
"hits": [ { "type": "full_url", "value": "https://api.example.com/login", "line": 42, "context": "...", "pattern": "full_http_url" }, { "type": "request_wrapper_def", "value": "request", "line": 10, "context": "...", "patter - Network accessline 41
{ "type": "full_url", "value": "https://api.example.com/login", "line": 42, "context": "...", "pattern": "full_http_url" }, - Network accessline 138
"total_endpoints": 0, "total_unique_domains": 0, "base_urls_found": ["https://api.example.com"], - Network accessline 139
"total_unique_domains": 0, "base_urls_found": ["https://api.example.com"], "script_raw_hits": 500, - Network accessline 140
"base_urls_found": ["https://api.example.com"], - Network accessline 155
{ "variable_name": "baseUrl", "value": "https://api.example.com", - Network accessline 156
"variable_name": "baseUrl", "value": "https://api.example.com", "env": "prod/dev/test/unknown", - Network accessline 157
"value": "https://api.example.com", - Network accessline 172
{ "id": "EP-001", "url": "https://api.example.com/api/user/login", - Network accessline 173
"id": "EP-001", "url": "https://api.example.com/api/user/login", "path": "/api/user/login", - Network accessline 174
"url": "https://api.example.com/api/user/login", - Network accessline 187
{ "id": "EP-001", "url": "https://api.example.com/api/user/login", - Network accessline 188
"id": "EP-001", "url": "https://api.example.com/api/user/login", "path": "/api/user/login", - Network accessline 189
"url": "https://api.example.com/api/user/login", - Network accessline 226
# 格式: METHOD URL # 生成时间: {timestamp} POST https://api.example.com/api/user/login - Network accessline 227
# 生成时间: {timestamp} POST https://api.example.com/api/user/login GET https://api.example.com/api/user/info - Network accessline 228
POST https://api.example.com/api/user/login - Network accessline 229
GET https://api.example.com/api/user/info
agents/agent-05-vuln-analyzer.md
agents/agent-06-reporter.md
- Network accessline 426
| # | 请求方式 | Base URL | 接口路径 | 完整 URL | 来源 JS 文件 | 备注 | |---|----------|----------|----------|----------|--------------|------| | 1 | POST | https://api.example.com | /user/login | https://api.example.com/user/login | pages/login/login.js | - Network accessline 427
|---|----------|----------|----------|----------|--------------|------| | 1 | POST | https://api.example.com | /user/login | https://api.example.com/user/login | pages/login/login.js | 登录接口 | | 2 | GET | https://api.example.com | /user/info - Network accessline 428
| 1 | POST | https://api.example.com | /user/login | https://api.example.com/user/login | pages/login/login.js | 登录接口 | - Network accessline 429
| 2 | GET | https://api.example.com | /user/info | https://api.example.com/user/info | pages/user/user.js | |
agents/agent-07-custom-analyzer.md
tools/scripts/endpoint_extractor.py
- Executable scriptline 1
#!/usr/bin/env python3
tools/scripts/secret_scanner.py
- Executable scriptline 1
#!/usr/bin/env python3 - Access to secretsline 32
[Credential-related source omitted] - Network accessline 68
("third_party", "gitlab_token", re.compile(r'glpat-[a-zA-Z0-9_\-]{20,}'), "Critical", None), ("third_party", "slack_token", re.compile(r'xox[baprs]-[a-zA-Z0-9-]+'), "Critical", None), ("third_party", "dingtalk_webhook", re.compile(r - Network accessline 69
[Credential-related source omitted] - Network accessline 70
[Credential-related source omitted] - Access to secretsline 70
[Credential-related source omitted] - Network accessline 71
("third_party", "feishu_webhook", re.compile(r'https://open\.feishu\.cn/open-apis/bot/v2/hook/[a-f0-9-]{36}'), "High", None), - Network accessline 72
("third_party", "wecom_webhook", re.compile(r'https://qyapi\.weixin\.qq\.com/cgi-bin/webhook/send\?key=[a-f0-9-]{36}'), "High", None), - Network accessline 76
("third_party", "oauth_secret", re.compile(r'(?i)(?:client[_-]?secret)\s*[:=]\s*[\'"][^\'"]{10,}[\'"]'), "High", None), ("third_party", "stripe_test_key", re.compile(r'(?:sk|pk)_test_[A-Za-z0-9]{16,}'), "High", None), ("third_party" - Network accessline 77
("third_party", "stripe_test_key", re.compile(r'(?:sk|pk)_test_[A-Za-z0-9]{16,}'), "High", None), ("third_party", "sentry_dsn", re.compile(r'https://[A-Za-z0-9]+@[A-Za-z0-9.-]+/\d+'), "High", None), ("third_party", "twilio_sid", re. - Network accessline 78
("third_party", "sentry_dsn", re.compile(r'https://[A-Za-z0-9]+@[A-Za-z0-9.-]+/\d+'), "High", None), - Access to secretsline 162
[Credential-related source omitted] - Access to secretsline 197
[Credential-related source omitted]
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Declared and executed: 3 facts
- Contacts oapi, which SKILL.md, the README and the plugin manifest do not mentiontools/scripts/secret_scanner.py:70High confidence
- Contacts open, which SKILL.md, the README and the plugin manifest do not mentiontools/scripts/secret_scanner.py:71High confidence
- Contacts qyapi, which SKILL.md, the README and the plugin manifest do not mentiontools/scripts/secret_scanner.py:72High confidence
Signal confidence: 56 facts
- Network access in prose of documentationREADME.md:110Low confidence
- Network access in prose of documentationREADME.md:111Low confidence
- Network access in prose of documentationREADME.md:112Low confidence
- Network access in code of documentationREADME.md:121Low confidence
- Network access in prose of documentationREADME.md:131Low confidence
- Network access in prose of the SKILL.mdSKILL.md:237Low confidence
- Network access in prose of the SKILL.mdSKILL.md:238Low confidence
- Network access in prose of the SKILL.mdSKILL.md:239Low confidence
- Network access in prose of documentationagents/agent-03-endpoint-miner.md:9Low confidence
- Network access in prose of documentationagents/agent-03-endpoint-miner.md:10Low confidence
- Network access in prose of documentationagents/agent-03-endpoint-miner.md:11Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:32Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:33Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:34Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:39Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:40Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:41Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:138Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:139Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:140Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:155Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:156Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:157Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:172Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:173Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:174Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:187Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:188Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:189Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:226Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:227Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:228Low confidence
- Network access in code of documentationagents/agent-03-endpoint-miner.md:229Low confidence
- Network access in prose of documentationagents/agent-05-vuln-analyzer.md:67Low confidence
- Network access in prose of documentationagents/agent-05-vuln-analyzer.md:68Low confidence
- Network access in code of documentationagents/agent-06-reporter.md:426Low confidence
- Network access in code of documentationagents/agent-06-reporter.md:427Low confidence
- Network access in code of documentationagents/agent-06-reporter.md:428Low confidence
- Network access in code of documentationagents/agent-06-reporter.md:429Low confidence
- Network access in code of documentationagents/agent-07-custom-analyzer.md:198Low confidence
- Network access in code of documentationagents/agent-07-custom-analyzer.md:199Low confidence
- Network access in code of documentationagents/agent-07-custom-analyzer.md:200Low confidence
- Executable script in code of a file that runstools/scripts/endpoint_extractor.py:1High confidence
- Executable script in code of a file that runstools/scripts/secret_scanner.py:1High confidence
- Access to secrets in code of a file that runstools/scripts/secret_scanner.py:32High confidence
- Network access in code of a file that runstools/scripts/secret_scanner.py:68High confidence
- Network access in code of a file that runstools/scripts/secret_scanner.py:69High confidence
- Network access in code of a file that runstools/scripts/secret_scanner.py:70High confidence
- Access to secrets in code of a file that runs: a variable, placeholder or call, not a stored valuetools/scripts/secret_scanner.py:70Low confidence
- Network access in code of a file that runstools/scripts/secret_scanner.py:71High confidence
and 6 more
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Compatible | Standard SKILL.md SKILL.md | .claude/skills/<skill-name>/ |
| Codex | Compatible | Standard SKILL.md SKILL.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
