Caveat verdict

wechatpay-medical-insurance-payment

88
🟢 Trusted
No high-risk patterns surfaced by the deep scan — automated capability review, not behavioral proof.

Reference skill providing WeChat Pay medical insurance payment integration guidance and code examples using the official WeChat Pay API; the skill itself does no credential handling or execution.

⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.

Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.

68
security
100
transparency
90
maintenance

Findings (2)

Pattern match critical

<script> tag in markdown — potential code injection

references/1-商户/示例代码/Java/5-JSAPI调起/JSAPI调起医保支付说明.md · code · <script

Pattern match low

References webhook/callback URL

references/1-商户/接入指南/开发参数与业务规则.md · prose · downgraded · callback_url

Permissions & capabilities

No declared permissions — minimal attack surface.

Is this flag fair?

Check another skill Browse the registry Auditing your own skills or configs? Use the API