Wxmini Security Audit

This is a full-stack security audit framework for WeChat mini-programs that coordinates seven specialized agents across sequential phases, from decompilation through vulnerability reporting. It runs Python regex scripts for complete rule coverage on API endpoints and secrets, then hands off to LLM agents for intelligent analysis with context. Phase 2 runs four agents in parallel to save time. The dual-layer approach is smart: regex catches everything deterministically, Claude interprets what actually matters. It's pure static analysis with no network calls, generates structured JSON outputs alongside markdown reports, and triggers deeper custom analysis when you mention specific endpoints in your prompt. Windows-only currently since it depends on the unveilr.exe decompiler. If you're auditing WeChat mini-programs regularly, this gives you a systematic workflow instead of ad-hoc grep sessions.

Install to Claude Code

npx -y skills add aradotso/security-skills --skill wxmini-security-audit --agent claude-code