Wxmini Security Audit
This is a full-stack security audit framework for WeChat mini-programs that coordinates seven specialized agents across sequential phases, from decompilation through vulnerability reporting. It runs Python regex scripts for complete rule coverage on API endpoints and secrets, then hands off to LLM agents for intelligent analysis with context. Phase 2 runs four agents in parallel to save time. The dual-layer approach is smart: regex catches everything deterministically, Claude interprets what actually matters. It's pure static analysis with no network calls, generates structured JSON outputs alongside markdown reports, and triggers deeper custom analysis when you mention specific endpoints in your prompt. Windows-only currently since it depends on the unveilr.exe decompiler. If you're auditing WeChat mini-programs regularly, this gives you a systematic workflow instead of ad-hoc grep sessions.
- skills.sh installs
- 919
- GitHub stars
- 6
- last updated
- Jul 14, 2026
Install
$ npx -y skills add aradotso/security-skills --skill wxmini-security-audit --agent claude-codeInstalls into .claude/skills of the current project.
Files
wxmini-security-audit
Skill by ara.so — Security Skills collection.
Automated security auditing framework for WeChat mini-programs using Claude Code Agent Teams. Orchestrates 7 specialized agents to perform comprehensive static analysis covering sensitive information leakage, API endpoint extraction, cryptographic analysis, and vulnerability detection across seven security dimensions.
What It Does
- Multi-Agent Orchestration: Coordinates 7 specialized agents (decompiler, secret scanner, endpoint miner, crypto analyzer, vulnerability analyzer, custom analyzer, reporter)
- Dual-Layer Architecture: Python regex scripts ensure 100% rule coverage, LLM agents provide intelligent analysis with context awareness
- Parallel Phase 2 Execution: Runs 4 analysis agents simultaneously to minimize audit time
- User Intent Parsing: Automatically triggers deep custom analysis when specific endpoints/parameters are mentioned
- Pure Static Analysis: Zero network requests, no attack code generation, fully local processing
- Comprehensive Reporting: Generates both summary reports and detailed documentation with structured data exports
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/aradotso/security-skills
- Category
- Security
- First seen
- Jul 14, 2026
More from aradotso/security-skills
All 58- Avast Premium Security Detection918
- Security Awareness Malicious Repository Detection909
- Avast Premium Security Malware Analysis905
- Avast Premium Security Awareness898
- Avast Security Analysis897
- Openclaw Security Watchdog856
- Security Threat Awareness852
- Malware Analysis DragonflyTomb Avast851
- Avast Premium Security Malware Detection837
- Mcp Security Hub827
- Identify Malicious Repository823
- Bitdefender Total Security Malware Analysis817
- Malware Warning Bitdefender Crack817
- Bitdefender Total Security Awareness799
- Malware Detection And Removal796
- Malware Detection Security Awareness777
- Dragonjar Android Pentesting Skill775
- Npm Security Best Practices770
- Malware Awareness Bitdefender Crack Fraud767
- Security Detections Mcp754
- Malware Repository Warning748
- Malware Detection And Reporting747
- Malware Analysis Warning731
- Malware Distribution Awareness717
Recommended
More Security
security-compliancedavila7/claude-code-templatesGuides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPA848skills.sh installs
npm-security-best-practicesaradotso/security-skillsnpm security best practices770skills.sh installs
awesome-claude-code-security-compliance-suitearadotso/security-skillsawesome claude code security compliance suite633skills.sh installs