content-planner
What this skill does
Content planning and management for WeChat Official Accounts, including topic recommendations and content calendar generation based on WeChat article search and trending analysis.
github/netease-youdao - Data Exfiltration - 5.9k stars
Threat analysis
Skill info
pkg:github/netease-youdao/LobsterAI@bef896b?skill=content-plannerAssessments (2)
Data Exfiltration
Data Exfiltration via local-llm-review
scripts/wechat_search.js
The script makes network requests to Sogou WeChat index to search for public account articles. This could potentially expose sensitive data if the script is misconfigured or if the search terms are usAnti-Scraping Risk
Anti-Scraping Risk via local-llm-review
scripts/wechat_search.js
The script includes a parameter (-r) to parse real URLs from WeChat, which may trigger anti-scraping measures and could be blocked by the service.Badge
Add the Anomity scan badge for content-planner to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of content-planner? Report an issue or request a rescan.
