Individual skill
miniapp-security-core
Use when reviewing authorized WeChat mini-program or mini-app targets for authentication bypass, IDOR, undefined-path access, API abuse, decryption and signature analysis, runtime reverse engineering, route mapping, and sensitive data exposure, with file-submission attack surfaces intentionally excluded.
SKILL.md
Source commit 1f8dded6a3e8c3c76806fb504999dc45ed61eac0
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 3, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 2,250
- Repository last updated
- May 26, 2026
- License
- Not available
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- security Derived category
- engineering Derived category
- data Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
README.mddoc · 2,998 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesSKILL.mdcore · 148,700 bytesmain.pyruns · 643 bytespackage/__init__.pyruns · 76 bytespackage/applet_debug/__init__.pyruns · 295 bytespackage/applet_debug/runtime.pyruns · 6,515 bytespackage/applet_debug/state.pyruns · 3,071 bytespackage/applet_detail/__init__.pyruns · 779 bytespackage/applet_detail/cloud_page.pyruns · 50,864 bytespackage/applet_detail/constants.pyruns · 387 bytespackage/applet_detail/debug_page.pyruns · 10,428 bytespackage/applet_detail/decompile_cache.pyruns · 20,066 bytespackage/applet_detail/decompile_content.pyruns · 20,639 bytespackage/applet_detail/decompile_events.pyruns · 19,456 bytespackage/applet_detail/decompile_matches.pyruns · 6,723 bytespackage/applet_detail/decompile_page.pyruns · 10,624 bytespackage/applet_detail/decompile_processing.pyruns · 15,138 bytespackage/applet_detail/decompile_search.pyruns · 11,921 bytespackage/applet_detail/decompile_search_events.pyruns · 2,905 bytespackage/applet_detail/decompile_search_state.pyruns · 1,365 bytespackage/applet_detail/decompile_support.pyruns · 18,372 bytespackage/applet_detail/decompile_task_state.pyruns · 3,486 bytespackage/applet_detail/decompile_tree.pyruns · 5,074 bytespackage/applet_detail/devtools_page.pyruns · 8,607 bytespackage/applet_detail/logs_page.pyruns · 5,213 bytespackage/applet_detail/pages.pyruns · 7,139 bytespackage/applet_detail/preview_jump.pyruns · 1,083 bytespackage/applet_detail/reconnect_hint.pyruns · 1,681 bytespackage/applet_detail/widgets.pyruns · 8,842 bytespackage/applet_logs/__init__.pyruns · 924 bytespackage/applet_logs/models.pyruns · 9,869 bytespackage/applet_processing/__init__.pyruns · 194 bytespackage/applet_processing/manager.pyruns · 18,581 bytespackage/applet_routes/__init__.pyruns · 2,236 bytespackage/applet_routes/action_policy.pyruns · 2,968 bytespackage/applet_routes/bridge.pyruns · 1,899 bytespackage/applet_routes/nav_inject.jsruns · 11,516 bytespackage/applet_routes/navigator.pyruns · 5,127 bytespackage/applet_routes/page.pyruns · 25,078 bytespackage/applet_routes/search.pyruns · 855 bytespackage/applet_routes/service.pyruns · 3,350 bytespackage/applet_routes/state.pyruns · 1,067 bytespackage/applet_routes/worker.pyruns · 12,103 bytespackage/cleanup/__init__.pyruns · 260 bytespackage/cleanup/models.pyruns · 849 bytespackage/cleanup/service.pyruns · 404 bytespackage/cleanup/worker.pyruns · 5,964 bytespackage/cloud_audit/__init__.pyruns · 2,385 bytespackage/cloud_audit/cache.pyruns · 3,950 bytespackage/cloud_audit/history.pyruns · 9,923 bytespackage/cloud_audit/inject.jsruns · 27,183 bytespackage/cloud_audit/models.pyruns · 5,682 bytespackage/cloud_audit/runner.pyruns · 1,861 bytespackage/cloud_audit/runtime.pyruns · 17,609 bytespackage/cloud_audit/scanner.pyruns · 12,978 bytespackage/cloud_audit/worker.pyruns · 12,383 bytespackage/code_optimizer/__init__.pyruns · 197 bytespackage/code_optimizer/formatter.pyruns · 6,795 bytespackage/config/__init__.pyruns · 67 bytespackage/config/defaults.pyruns · 3,360 bytespackage/content_scanner/__init__.pyruns · 161 bytespackage/content_scanner/regex_scanner.pyruns · 6,690 bytespackage/crypto/__init__.pyruns · 158 bytespackage/crypto/core.pyruns · 5,159 bytespackage/crypto/service.pyruns · 7,530 bytespackage/decompiler/__init__.pyruns · 584 bytespackage/decompiler/auto_cache.pyruns · 16,508 bytespackage/decompiler/cache_keys.pyruns · 5,347 bytespackage/decompiler/constants.pyruns · 755 bytespackage/decompiler/core.pyruns · 10,596 bytespackage/decompiler/file_browser.pyruns · 11,441 bytespackage/decompiler/folder_names.pyruns · 577 bytespackage/decompiler/process_pool.pyruns · 3,329 bytespackage/decompiler/runner.pyruns · 2,086 bytespackage/decompiler/service.pyruns · 1,919 bytespackage/decompiler/worker.pyruns · 7,677 bytespackage/decompiler/worker_auto.pyruns · 18,514 bytespackage/decompiler/worker_decompile.pyruns · 7,704 bytespackage/decompiler/worker_files.pyruns · 9,603 bytespackage/decompiler/worker_jump_identifiers.pyruns · 1,871 bytespackage/decompiler/worker_matches.pyruns · 5,920 bytespackage/decompiler/worker_optimize.pyruns · 4,580 bytespackage/decompiler/worker_search.pyruns · 6,328 bytespackage/devtools/__init__.pyruns · 150 bytespackage/devtools/bridge.pyruns · 4,999 bytespackage/devtools/connection_stability.pyruns · 3,054 bytespackage/devtools/constants.pyruns · 157 bytespackage/devtools/engine.pyruns · 26,517 bytespackage/devtools/identity.pyruns · 1,344 bytespackage/devtools/js_injection_recovery.pyruns · 1,685 bytespackage/devtools/protocol_codec.pyruns · 11,305 bytespackage/devtools/protocol_constants.pyruns · 3,317 bytespackage/devtools/protocol_userscript.pyruns · 3,587 bytespackage/devtools/service.pyruns · 28,906 bytespackage/devtools/state.pyruns · 1,123 bytespackage/devtools/third_party/__init__.pyruns · 62 bytespackage/devtools/third_party/wmpf_debug_pb2.pyruns · 17,445 bytespackage/devtools/worker.pyruns · 104,246 bytespackage/js_injection/__init__.pyruns · 1,256 bytespackage/js_injection/catalog.pyruns · 5,418 bytespackage/js_injection/mode_overrides.pyruns · 1,546 bytespackage/js_injection/models.pyruns · 775 bytespackage/js_injection/paths.pyruns · 378 bytespackage/js_injection/runtime.pyruns · 6,646 bytespackage/js_injection/runtime_toggle.pyruns · 10,950 bytespackage/js_injection/service.pyruns · 4,455 bytespackage/js_injection/widgets.pyruns · 19,159 bytespackage/js_injection/worker.pyruns · 2,907 bytespackage/mcp_control/__init__.pyruns · 278 bytespackage/mcp_control/cdp_client.pyruns · 9,429 bytespackage/mcp_control/config.pyruns · 3,421 bytespackage/mcp_control/crypto_helpers.pyruns · 6,333 bytespackage/mcp_control/http_entry.pyruns · 1,165 bytespackage/mcp_control/local_app.pyruns · 25,923 bytespackage/mcp_control/runtime_session.pyruns · 93,084 bytespackage/mcp_control/service.pyruns · 4,721 bytespackage/mcp_control/token_middleware.pyruns · 1,360 bytespackage/mcp_control/worker.pyruns · 9,725 bytespackage/miniapp_jump/__init__.pyruns · 1,664 bytespackage/miniapp_jump/identifiers.pyruns · 1,511 bytespackage/miniapp_jump/jump_inject.jsruns · 11,988 bytespackage/miniapp_jump/navigator.pyruns · 8,529 bytespackage/miniapp_jump/page.pyruns · 21,564 bytespackage/miniapp_jump/record_context.pyruns · 3,776 bytespackage/miniapp_jump/state.pyruns · 4,606 bytespackage/monitor/__init__.pyruns · 714 bytespackage/monitor/constants.pyruns · 278 bytespackage/monitor/controller.pyruns · 2,234 bytespackage/monitor/paths.pyruns · 3,258 bytespackage/monitor/service.pyruns · 808 bytespackage/monitor/utils.pyruns · 407 bytespackage/monitor/windows.pyruns · 6,575 bytespackage/monitor/worker.pyruns · 2,784 bytespackage/monitor/worker_cleanup.pyruns · 3,268 bytespackage/monitor/worker_commands.pyruns · 7,718 bytespackage/monitor/worker_database.pyruns · 21,204 bytespackage/monitor/worker_files.pyruns · 10,505 bytespackage/monitor/worker_identity.pyruns · 5,957 bytespackage/monitor/worker_scan.pyruns · 5,799 bytespackage/regex_rules/__init__.pyruns · 224 bytespackage/regex_rules/presets.pyruns · 8,881 bytespackage/runtime/__init__.pyruns · 1,539 bytespackage/runtime/async_app.pyruns · 1,827 bytespackage/runtime/high_dpi.pyruns · 2,607 bytespackage/runtime/models.pyruns · 884 bytespackage/runtime/process_bootstrap.pyruns · 970 bytespackage/runtime/shutdown.pyruns · 2,491 bytespackage/runtime/task_bus.pyruns · 854 bytespackage/runtime/task_supervisor.pyruns · 2,275 bytespackage/runtime/ui_metrics.pyruns · 1,021 bytespackage/storage/__init__.pyruns · 64 bytespackage/storage/state_store.pyruns · 16,529 bytespackage/ui/__init__.pyruns · 82 bytespackage/ui/cards/__init__.pyruns · 437 bytespackage/ui/cards/batch_delete.pyruns · 550 bytespackage/ui/cards/card_widget.pyruns · 6,656 bytespackage/ui/cards/grid_controller.pyruns · 1,967 bytespackage/ui/cards/presenter.pyruns · 736 bytespackage/ui/cards/store.pyruns · 1,352 bytespackage/ui/config_dialog.pyruns · 8,240 bytespackage/ui/confirm_dialog.pyruns · 2,739 bytespackage/ui/constants.pyruns · 357 bytespackage/ui/crypto_dialog.pyruns · 13,121 bytespackage/ui/main_window.pyruns · 9,332 bytespackage/ui/main_window_controls.pyruns · 5,970 bytespackage/ui/main_window_monitor.pyruns · 36,772 bytespackage/ui/mcp_dialog.pyruns · 6,017 bytespackage/ui/paths.pyruns · 747 bytespackage/ui/record_text.pyruns · 427 bytespackage/ui/rules_dialog.pyruns · 11,681 bytespackage/ui/styles.pyruns · 29,698 bytespackage/ui/widgets.pyruns · 1,464 bytespackage/ui/window_chrome.pyruns · 8,991 bytesrequirements.txtdoc · 327 bytestools.mddoc · 9,076 bytestools/config/win/addresses.11581.jsonasset · 144 bytestools/config/win/addresses.11633.jsonasset · 144 bytestools/config/win/addresses.13331.jsonasset · 144 bytestools/config/win/addresses.13341.jsonasset · 144 bytestools/config/win/addresses.13487.jsonasset · 144 bytestools/config/win/addresses.13639.jsonasset · 144 bytestools/config/win/addresses.13655.jsonasset · 144 bytestools/config/win/addresses.13871.jsonasset · 144 bytestools/config/win/addresses.13909.jsonasset · 144 bytestools/config/win/addresses.14161.jsonasset · 144 bytestools/config/win/addresses.14199.jsonasset · 144 bytestools/config/win/addresses.14315.jsonasset · 144 bytestools/config/win/addresses.16133.jsonasset · 144 bytestools/config/win/addresses.16203.jsonasset · 144 bytestools/config/win/addresses.16389.jsonasset · 144 bytestools/config/win/addresses.16467.jsonasset · 144 bytestools/config/win/addresses.16771.jsonasset · 144 bytestools/config/win/addresses.16815.jsonasset · 144 bytestools/config/win/addresses.16965.jsonasset · 144 bytestools/config/win/addresses.17037.jsonasset · 144 bytestools/config/win/addresses.17071.jsonasset · 144 bytestools/config/win/addresses.17127.jsonasset · 144 bytestools/config/win/addresses.18055.jsonasset · 144 bytestools/config/win/addresses.18151.jsonasset · 144 bytestools/config/win/addresses.18787.jsonasset · 144 bytestools/config/win/addresses.18891.jsonasset · 144 bytestools/config/win/addresses.18955.jsonasset · 144 bytestools/config/win/addresses.19027.jsonasset · 144 bytestools/config/win/addresses.19201.jsonasset · 144 bytestools/config/win/addresses.19339.jsonasset · 144 bytestools/config/win/addresses.19459.jsonasset · 144 bytestools/hook.jsruns · 7,918 bytestools/js/block_popups_runtime.jsruns · 4,218 bytestools/js/test_injection.jsruns · 961 bytestools/js/wx_environment_probe.jsruns · 8,003 byteswxid.dbasset · 32,768 bytes
No licensed excerpt is available. You can inspect the pinned source.