Individual skill

wechat-miniprogram-pentesting

微信小程序渗透测试方法论。覆盖 .wxapkg 解包与源码还原、前端代码审计（密钥硬编码/接口清单/加密逻辑）、接口越权（客户端可控状态位/ID 遍历/水平越权）、支付与业务逻辑、本地存储与 WebView、云开发与开放数据接口。当拿到小程序反编译产物、.wxapkg 包、AppID 或 #小程序:// 短链，需要测试其安全性时使用。

skills/mobile/wechat-miniprogram-pentesting/SKILL.md

Source commit c0d3a4645f26be5b94f64344b501db4191dc9788

What was checked

Matches the observed repository HEAD

Yes

Scanner rules are current

No

Repository scan complete

No

Skill scan complete

No

Observed behavior

Not checked yet

Last checked

Nov 3, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.